redhuntlabs / KubeStalk
KubeStalk discovers Kubernetes and related infrastructure based attack surface from a black-box perspective.
β171Updated 2 months ago
Alternatives and similar repositories for KubeStalk:
Users that are interested in KubeStalk are comparing it to the libraries listed below
- π§° Multi Tool Kubernetes Pentest Imageβ229Updated 7 months ago
- a tool to audit the istio service meshβ173Updated 3 years ago
- Damn Vulnerable Kubernetes App (DVKA) is a series of apps deployed on Kubernetes that are damn vulnerable.β131Updated 3 weeks ago
- NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.β80Updated 2 months ago
- OWASP Kubernetes security and compliance tool [WIP]β106Updated last year
- AWACS for RBAC. Tool for auditing CRUD permissions in Kubernetes' RBAC.β46Updated 10 months ago
- β93Updated last month
- Post-exploit a compromised etcd, gain persistence and remote shell to nodes.β74Updated 10 months ago
- Tool for auditing RBACs in Kubernetesβ216Updated last year
- Curating Falco rules with MITRE ATT&CK Matrixβ78Updated last year
- Security testing tool for Kubernetes, abusing kubelet credentials on public cloud providers.β162Updated last year
- Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, worβ¦β474Updated 3 years ago
- β175Updated 4 months ago
- Kubernetes focused container assessment and context discovery tool for penetration testingβ452Updated 9 months ago
- Research on various techniques to bypass default falco ruleset (based on falco v0.28.1).β81Updated last year
- β44Updated 3 years ago
- truffleproc β hunt secrets in process memory (TruffleHog & gdb mashup)β114Updated last year
- Cloud agnostic IAM permissions enumeratorβ140Updated 7 months ago
- Evaluate the RBAC permissions of Kubernetes identities through policies written in Regoβ343Updated this week
- Container π¦ Security π Best Practices Checklist π & Slidesβ67Updated 4 years ago
- Awesome resources about Security in Kubernetesβ42Updated 2 years ago
- KBOM - Kubernetes Bill of Materialsβ311Updated last week
- BadRobot - Operator Security Audit Toolβ218Updated this week
- Protect against subdomain takeoverβ93Updated 10 months ago
- Supporting code and demos for KubeCon EU 2023 talk "Malicious Compliance: Reflections on Trusting Container Image Scanners"β67Updated last year
- Kubernetes exploitation toolβ361Updated 8 months ago
- book websiteβ67Updated 3 years ago
- A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where wβ¦β104Updated 4 months ago
- A collection of tools to improve your containerized apps security postureβ141Updated 10 months ago
- The Swiss Army Container for Cloud Native Security. Container with all the list of useful tools/commands while hacking and securing Contaβ¦β268Updated last year