FeaturesTourNumbers by Hassan Alsallam ↗ Request access
KUBERNETES CYBER RANGE

Attack a Kubernetes cluster, then roll it back.

A Kubernetes cyber range in one Go binary. Run 83+ realistic attack scenarios inside a throwaway cluster, study what changed, and undo every change with one click.

Request accessSee what it does ↓
Go · Kubernetes · client-go · SQLite · WebSocket · MITRE ATT&CK
KubeRange icon
KubeRange main window
Full Reversibility

Every change is recorded so it can be undone.

Each created, modified or host-level change is tracked in SQLite before it happens. Rollback is idempotent and safe to repeat, so a lab cluster can be attacked, studied and returned to a clean state.

Features

What KubeRange does

🎯

83+ attack scenarios

Organized against the MITRE ATT&CK container matrix and the OWASP Kubernetes Top 10.

↩

One-click rollback

Every change is journaled in SQLite, so undoing an attack is idempotent and repeatable.

🛡

Defensive tooling

Zero-trust network-policy synthesis, RBAC remediation, policy diffing and chaos tests alongside the attacks.

🔎

Scan and monitor

Vulnerability scanning plus a runtime monitor for processes, files and network flows.

🗺

ATT&CK heatmap

See which techniques have been exercised, chain them into kill chains and review the timeline.

💻

Built-in terminal

A live PTY terminal in the single-page dashboard, served by the same Go binary.

Offense

Realistic attacks in an isolated lab

  • Runs as a privileged pod inside a throwaway cluster
  • Scenarios mapped to MITRE ATT&CK and the OWASP Kubernetes Top 10
  • Chain techniques into kill chains and replay them
  • For authorized labs, CTFs and defensive research only
Realistic attacks in an isolated lab
Defense

Turn what you learned into hardening

  • Synthesize zero-trust network policies from observed traffic
  • Find and remediate over-privileged RBAC bindings
  • Score posture against CIS and NSA/CISA benchmarks
  • Pod Security Standards testing and admission webhook fuzzing
Turn what you learned into hardening
Visibility

See every technique on one map

  • ATT&CK heatmap of exercised techniques
  • Timeline, evidence and post-mortem views
  • Optional AI analysis of results
See every technique on one map
By the numbers
83+attack scenarios
~148,000lines of Go
60internal packages
26dashboard views