Services

Distributed key-value store used in Kubernetes clusters. Attackers probe for unauthenticated APIs, extract secrets and credentials, tamper with cluster configs, and pivot to other nodes

Cassandra is a distributed NoSQL database. Attackers probe open ports, enumerate keyspaces, exploit misconfigs or weak auth, extract data, and pivot using stolen credentials

Consul is a service mesh and discovery tool. Attackers enumerate services, exploit unauthenticated APIs, execute commands via health checks, escalate privileges, and move laterally through registered nodes

CouchDB is a NoSQL database using HTTP API. Attackers enumerate exposed ports, probe admin interfaces, exploit misconfigs, escalate via Erlang cookie, and exfiltrate JSON documents

Distributed file system for big data clusters. Attackers enumerate exposed web UIs, exploit misconfigs for unauthenticated access, extract stored data, and pivot through cluster nodes

Prometheus is a metrics monitoring system. Attackers probe exposed endpoints for sensitive data, exploit misconfigs, pivot via scraped credentials, and establish persistence through metric manipulation