OWASP / kstg
Kubernetes Security Testing Guide
☆26Updated 4 months ago
Related projects: ⓘ
- Slides, Cheatsheet and Resources from our Blackhat EU talk☆38Updated 4 years ago
- Reference architecture and proof of concept implementation for supply chain security gateway☆23Updated last year
- Jekyll Files for cloudsecwiki.com☆49Updated 3 years ago
- Exploit CVE-2021-25735: Kubernetes Validating Admission Webhook Bypass☆18Updated 3 years ago
- Kubernetes Pwnage for all☆54Updated 3 years ago
- Maturity Model Collaborative project☆13Updated last year
- OWASP Kubernetes Security Testing Guide☆37Updated 2 weeks ago
- Serverless Workshop☆16Updated last year
- Application Security Workflow Automation using Docker and Kubernetes☆22Updated last year
- Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.☆74Updated 2 years ago
- Kubernetes Easter CTF☆58Updated 4 years ago
- Salesforce Policy Deviation Checker☆29Updated 3 years ago
- The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters☆13Updated 2 years ago
- Offensive Terraform module which copies publicly exposed EBS snapshot to us-east-1 region in attacker's AWS account and creates EBS volum…☆14Updated 4 years ago
- Dockerfile Security Checker using OPA Rego policies with Conftest☆58Updated 2 years ago
- ZAP Management Scripts☆20Updated last week
- Pivot into private VPC networks using a VPN connection☆40Updated 4 years ago
- OWASP Threat Dragon with Gitlab Integration☆24Updated 6 years ago
- DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source☆106Updated 4 years ago
- A gitbook for doing a null Bangalore session on linux container security to discuss and teach namespaces, cgroups etc.☆20Updated 7 years ago
- A curated list of security tools for Hackers & Builders!☆98Updated last month
- Semgrep rules corresponding to the OWASP ASVS standard☆27Updated 3 years ago
- Orchestron is an Application Vulnerability Management and Correlation Tool.Orchestron helps you solve one key problem "Find and fix vulne…☆31Updated last year
- AWS SSO serverless phishing API.☆29Updated 3 years ago
- AWS Security Checks☆36Updated 6 years ago
- ☆30Updated this week
- This repo contains workshop material delivered at #nullcon2020☆15Updated 4 years ago
- AppSecPipeline Specification for DevOps automation.☆38Updated last year
- Repository for all the workshop content delivered at nullcon X on 1st of March 2019☆80Updated 5 years ago
- Security checks for your researches☆33Updated 3 years ago