Alternatives and similar repositories for k8sthreatmodeling

Users that are interested in k8sthreatmodeling are comparing it to the libraries listed below

• wiz-sec-public / namespacehound
  NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.
  ☆98Updated 5 months ago
• DataDog / workload-security-evaluator
  Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Security Management.
  ☆31Updated 7 months ago
• isovalent / eBPF-Summit-2022-CTF
  Capture The Flag Challenge for eBPF Summit 2022
  ☆18Updated 2 years ago
• antitree / seccomp-diff
  ☆72Updated 3 weeks ago
• orcasecurity-research / kte
  Test & Compare different Kubernetes security offerings on EKS, GKE and AKS
  ☆39Updated 9 months ago
• Zeerg / helix-honeypot
  K8s API Honeypot with Active Defense Capabilities
  ☆40Updated last year
• praetorian-inc / snowcat
  a tool to audit the istio service mesh
  ☆173Updated 3 years ago
• gojek / CureIAM
  Clean accounts over permissions in GCP infra at scale
  ☆71Updated 2 years ago
• offensive-actions / terraform-provider-statefile-rce
  This terraform provider can be used to get remote code execution by injecting a dummy resource in a writeable state file.
  ☆55Updated 4 months ago
• gunjan5 / container-security
  Container 📦 Security 🔐 Best Practices Checklist 📋 & Slides
  ☆68Updated 4 years ago
• jpts / kubectl-execws
  A replacement for "kubectl exec" that works over WebSocket connections.
  ☆39Updated last year
• raesene / Cloud-Native-Security-Talks
  ☆21Updated 6 months ago
• wiz-sec-public / peach-framework
  PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by use…
  ☆71Updated 2 years ago
• SDA-SE / cluster-image-scanner
  Discover vulnerabilities and container image misconfiguration in production environments.
  ☆56Updated last week
• elastic / csp-security-policies
  Cloud Security Posture security policies
  ☆31Updated 8 months ago
• RichardoC / kube-audit-rest
  Kubernetes audit logging, when you don't control the control plane
  ☆81Updated this week
• semgr8ns / semgr8s
  Semgrep-based Policy Controller for Kubernetes
  ☆47Updated 2 months ago
• Permiso-io-tools / SkyScalpel
  ☆44Updated 7 months ago
• CloudDefenseAI / falco_extended_rules
  Curating Falco rules with MITRE ATT&CK Matrix
  ☆80Updated last year
• ReversecLabs / encap-attack
  Sniff and attack networks that use IP-in-IP or VXLAN encapsulation protocols.
  ☆21Updated 9 months ago
• kube-tarian / tarian
  Protect your Cloud Native Applications running on Kubernetes from malicious attacks with pre-registered source code, pre-registered runti…
  ☆55Updated 5 months ago
• blackberry / Falco-bypasses
  Research on various techniques to bypass default falco ruleset (based on falco v0.28.1).
  ☆81Updated last year
• raesene / eathar
  ☆27Updated 3 weeks ago
• OWASP / KubeLight
  OWASP Kubernetes security and compliance tool [WIP]
  ☆106Updated 2 years ago
• raesene / container-security-site
  ☆96Updated 4 months ago
• hashicorp-forge / semgrep-rules
  HashiCorp-relevant rules for the Semgrep code analysis tool
  ☆41Updated last year
• DataDog / attache
  Attaché provides an emulation layer for Cloud Provider IMDS APIs
  ☆57Updated 11 months ago
• kannkyo / epss-api
  EPSS(Exploit Prediction Scoring System) API client
  ☆18Updated last week
• Permiso-io-tools / LogLicker
  Tool for obfuscating and deobfuscating data.
  ☆70Updated last year
• 5GSEC / nimbus
  Intent driven security automation framework
  ☆25Updated 2 months ago