adavarski / HomeLab-k8s-DevSecOps-playground
⚙ DevSecOps Kubernetes Playground ("A Hacker's Guide to Kubernetes")
☆16Updated last year
Alternatives and similar repositories for HomeLab-k8s-DevSecOps-playground:
Users that are interested in HomeLab-k8s-DevSecOps-playground are comparing it to the libraries listed below
- Damn Vulnerable Kubernetes App (DVKA) is a series of apps deployed on Kubernetes that are damn vulnerable.☆126Updated last week
- ☆12Updated 3 months ago
- ☆44Updated 3 years ago
- ☆175Updated 3 months ago
- Test & Compare different Kubernetes security offerings on EKS, GKE and AKS☆38Updated 6 months ago
- Curating Falco rules with MITRE ATT&CK Matrix☆77Updated last year
- Defending IaaS with ATT&CK is a project to create a collection of ATT&CK techniques relevant to a Linux IaaS environment, as well as a me…☆13Updated last year
- 🌐 Visualize and explore IaC ✒️ Create and share notes in VS Code 🤝 Sync notes and findings in real-time with friends☆72Updated last year
- ☆15Updated 7 months ago
- Determine privileges from cloud credentials via brute-force testing.☆67Updated 6 months ago
- KubeStalk discovers Kubernetes and related infrastructure based attack surface from a black-box perspective.☆171Updated last month
- NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.☆80Updated 2 months ago
- Awesome resources about Security in Kubernetes☆41Updated 2 years ago
- book website☆67Updated 3 years ago
- Container 📦 Security 🔐 Best Practices Checklist 📋 & Slides☆67Updated 4 years ago
- 🧰 Multi Tool Kubernetes Pentest Image☆226Updated 6 months ago
- Curated list of security tools☆64Updated last year
- Sniff and attack networks that use IP-in-IP or VXLAN encapsulation protocols.☆21Updated 6 months ago
- Kubernetes Stranger Danger☆61Updated last year
- Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Security Management.☆30Updated 4 months ago
- $ kubectl hacking - my journey with kate☆38Updated 3 years ago
- ☆12Updated 3 years ago
- A vulnerable environment for exploring common GCP misconfigurations and vulnerabilities☆26Updated 8 months ago
- Discover vulnerabilities and container image misconfiguration in production environments.☆55Updated 2 weeks ago
- a tool to audit the istio service mesh☆173Updated 3 years ago
- This terraform provider can be used to get remote code execution by injecting a dummy resource in a writeable state file.☆52Updated last month
- Clean accounts over permissions in GCP infra at scale☆71Updated last year
- A Golang library for interacting with the EPSS (Exploit Prediction Scoring System).☆27Updated last month
- Service that scans your Infrastructure as Code for common vulnerabilities☆48Updated last year
- AWACS for RBAC. Tool for auditing CRUD permissions in Kubernetes' RBAC.☆46Updated 9 months ago