OWASP / kstgLinks
Kubernetes Security Testing Guide
☆26Updated last year
Alternatives and similar repositories for kstg
Users that are interested in kstg are comparing it to the libraries listed below
Sorting:
- Kubernetes Pwnage for all☆56Updated 5 years ago
- This repo gives an overview of some GCP metadata API attack and defend patterns☆77Updated 5 years ago
- Kubernetes Easter CTF☆59Updated 5 years ago
- All-in-one tool for managing vulnerability reports from AppSec pipelines☆108Updated 2 years ago
- A curated list of security tools for Hackers & Builders!☆99Updated last year
- Application Security Workflow Automation using Docker and Kubernetes☆23Updated 3 years ago
- DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source☆109Updated 6 years ago
- Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.☆78Updated 3 years ago
- Jekyll Files for cloudsecwiki.com☆49Updated 4 years ago
- ☆27Updated 2 months ago
- ☆74Updated 5 years ago
- A step-by-step walkthrough of CloudGoat 2.0 scenarios.☆134Updated 5 years ago
- AWS Security Checks☆40Updated 7 years ago
- Offensive Terraform module which copies publicly exposed EBS snapshot to us-east-1 region in attacker's AWS account and creates EBS volum…☆15Updated 5 years ago
- Reference architecture and proof of concept implementation for supply chain security gateway☆23Updated 2 years ago
- Monitoring GitHub for sensitive data shared publicly☆66Updated 3 years ago
- Container Blackbox Security Auditing Tool: enumerates security configuration from within the target container☆106Updated 7 years ago
- Salesforce Policy Deviation Checker☆30Updated 5 years ago
- Static security checker for Dockerfiles☆95Updated last year
- Pentester-focused Docker registry tool to enumerate and pull images☆112Updated 5 years ago
- Exploit CVE-2021-25735: Kubernetes Validating Admission Webhook Bypass☆17Updated 4 years ago
- Scan your EC2 instance to find its vulnerabilities using Vuls (https://vuls.io/en/)☆89Updated 3 years ago
- Semgrep rules corresponding to the OWASP ASVS standard☆27Updated 5 years ago
- The Open Security Summit is focused on the collaboration between, Developers and Application Security☆45Updated 5 months ago
- Bento Toolkit is a minimal fedora-based container for penetration tests and CTF with the sweet addition of GUI applications.☆76Updated 4 years ago
- Presentations, training modules, and other education materials from Duo Security's Application Security team.☆77Updated 4 years ago
- Hayat is a script for report and analyze Google Cloud Platform resources.☆81Updated 5 years ago
- Tools for AWS forensics☆65Updated 9 years ago
- Dependency Combobulator☆94Updated last year
- The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters☆14Updated 3 years ago