krol3 / kubernetes-security-checklist
Awesome resources about Security in Kubernetes
☆42Updated 2 years ago
Alternatives and similar repositories for kubernetes-security-checklist:
Users that are interested in kubernetes-security-checklist are comparing it to the libraries listed below
- Container 📦 Security 🔐 Best Practices Checklist 📋 & Slides☆67Updated 4 years ago
- GCP GOAT is the vulnerable application for learn the GCP Security☆64Updated last year
- Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …☆61Updated 9 months ago
- KubeStalk discovers Kubernetes and related infrastructure based attack surface from a black-box perspective.☆171Updated 2 months ago
- This is vulnerable microservice written in many language to demonstrating OWASP API Top Security Risk (under development)☆43Updated 2 years ago
- OWASP Foundation Web Respository☆34Updated 6 months ago
- The OWASP DevSecOps Guideline explains how we can implement a secure pipeline and use best practices and introduce tools that we can use …☆66Updated 9 months ago
- Protect against subdomain takeover☆93Updated 10 months ago
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider☆138Updated 3 years ago
- Curated list of security tools☆64Updated last year
- OWASP Kubernetes security and compliance tool [WIP]☆106Updated last year
- DustiLock is a tool to find which of your dependencies is susceptible to a Dependency Confusion attack.☆37Updated 3 years ago
- The Open Security Summit is focused on the collaboration between, Developers and Application Security☆45Updated 3 months ago
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆102Updated last month
- ☆239Updated 6 months ago
- OWASP Foundation Web Respository☆82Updated 2 months ago
- A small tool to help developers understand a huge set of security requirements from appsec teams☆45Updated 2 years ago
- openrisk is a tool that generates a risk score based on the results of a Nuclei scan.☆166Updated last month
- Jekyll Files for cloudsecwiki.com☆50Updated 3 years ago
- Purposely vulnerable Java application to help lead secure coding workshops☆179Updated 9 months ago
- A curated list of Software Component Analysis (SCA) books, courses - free and paid, videos, tools, and tutorials.☆103Updated 4 months ago
- A step-by-step walkthrough of CloudGoat 2.0 scenarios.☆134Updated 4 years ago
- A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where w…☆104Updated 4 months ago
- Curating Falco rules with MITRE ATT&CK Matrix☆78Updated last year
- A project to visualize the software supply chain☆43Updated last year
- WAF bypass PoC☆46Updated last year
- An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites…☆58Updated 2 months ago
- OWASP Raider: a novel framework for manipulating the HTTP processes of persistent sessions☆104Updated last year
- A full insecure kubernetes application for testing security tools☆70Updated this week
- An extension to use Semgrep inside Burp Suite.☆88Updated last year