Skip to content
attack.paths
Connexion
← LibraryTechnique entry
K-ETCD-OPENInitial Access

etcd Exposed Without Auth

etcd on 2379/2380 without --client-cert-auth — read every secret in the cluster.

§ Where this technique fits

K-ETCD-OPEN is catalogued under the Initial Access tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 2 on average.

§ Dossiers chaining this technique

§ What commonly comes next

  1. 01
    Unsecured Credentials
    T1552 · Credential Access
    seen 1×