Уязвимая среда для изучения безопасности Kubernetes
22 сценария:
▪️Sensitive keys in codebases
▪️DIND (docker-in-docker) exploitation
▪️SSRF in the Kubernetes (K8S) world
▪️Container escape to the host system
▪️Docker CIS benchmarks analysis
▪️Kubernetes CIS benchmarks analysis
▪️Attacking private registry
▪️NodePort exposed services
▪️Helm v2 tiller to PwN the cluster - [Deprecated]
▪️Analyzing crypto miner container
▪️Kubernetes namespaces bypass
▪️Gaining environment information
▪️DoS the Memory/CPU resources
▪️Hacker container preview
▪️Hidden in layers
▪️RBAC least privileges misconfiguration
▪️KubeAudit - Audit Kubernetes clusters
▪️Falco - Runtime security monitoring & detection
▪️Popeye - A Kubernetes cluster sanitizer
▪️Secure network boundaries using NSP
▪️Cilium Tetragon - eBPF-based Security ▪️Observability and Runtime Enforcement
▪️Securing Kubernetes Clusters using Kyverno Policy Engine
Установка:
git clone https://github.com/madhuakula/kubernetes-goat.git
cd kubernetes-goat
chmod +x setup-kubernetes-goat.sh
bash setup-kubernetes-goat.sh
bash access-kubernetes-goat.sh
# navigate to http://127.0.0.1:1234
🔗 Guide
💻 Repo
📔 Docs
#k8s #goat #kubernetes
✈️ Whitehat Lab 💬Chat