Docker for Pentesters
Learn essential Docker techniques for penetration testing, enhancing your cybersecurity skills and improving your ability to identify vulnerabilities in containerized environments.
Securing the Software Supply Chain with TUF and Docker - Protecting Against Distribution Attacks
Explore secure software updates with TUF framework, focusing on key revocation, mitigating attacks, and integrating with Docker's Notary for enhanced software supply chain security.
Cilium - Network and Application Security with BPF and XDP
Deep dive into BPF technology for application and network security, exploring Cilium's use in distributed systems with Docker for simplified operations and troubleshooting.
Talking TUF: Securing Software Distribution
Explore The Update Framework (TUF) for securing software update systems. Learn how to integrate this flexible security framework to protect against vulnerabilities and enhance software distribution safety.
Attack Tree Vignettes for Containers as a Service Applications - Risk-Centric Threat Modeling
Explore attack tree vignettes and risk-centric threat models for Containers as a Service applications, focusing on security challenges in cloud adoption and containerization.
Using OpenEmbedded Inside Containers - How and Why
Explore generating container payloads with OpenEmbedded for embedded Linux devices, comparing benefits and challenges to traditional Docker approaches in image size, reproducibility, and license management.
Use Pi-Hole with Unbound DNS for Enhanced Privacy
Enhance online privacy by setting up Pi-hole with Unbound DNS to filter ads and prevent data tracking. Learn to install and configure these tools for improved web browsing security.
Designing Secure Containerized Applications for Embedded Linux Devices
Learn to design secure containerized applications for embedded Linux, covering container infrastructure, image security, execution security, and best practices.
Notary: State of Development and Supply Chain Security
Explore supply chain security with Notary project overview, Notary v2 updates, and ecosystem context. Learn about TUF and in-toto projects and their role in achieving security outcomes.
The Attacker's Guide to Exploiting Secrets in the Universe
Explore methods to discover and exploit secrets in git repositories, containers, and compiled apps. Learn about vulnerabilities in API keys and credentials across various environments.
Building a DDoS Testbed with Docker
Learn to build a DDoS testbed using Docker, exploring attack types, research challenges, and practical implementation strategies for cybersecurity professionals and researchers.
DevSecOps Orchestration of Text Analytics with Containers
Explore secure container usage for text analytics in intelligence processing, focusing on Docker and Kubernetes for DevSecOps orchestration.
Advanced API Security with Kong - Developer Day 2021 Labs
Learn to secure APIs using Kong Gateway and Okta. Configure OIDC authentication for Kong Developer Portal and Manager, and explore various security plugins and features.
Use Seafile Sync and Drive Self Hosted, Open Source Options Instead of Google and Dropbox
Explore Seafile: A self-hosted, open-source alternative to cloud storage services. Learn to set up, manage, and sync files securely on your own hardware for enhanced privacy and control.
Stop Trivializing Cybersecurity - Level Up and Treat Yourself Like a Professional
Elevate your cybersecurity approach: Treat it as a professional discipline, emphasizing continuous learning and skill development to effectively combat evolving threats.
Accelerating Electric Vehicle Innovation with Cloud Native Technologies
Explore NIO's use of cloud native technologies to enhance EV software development, addressing challenges in consistency, testing, and data utilization between simulated and real-world environments.
Accelerating Electric Vehicle Innovation with Cloud Native Technologies
Explore how NIO leverages cloud native tech like Containerd, Kubernetes, and KubeEdge to enhance EV software development, driving innovation in vehicle intelligence and connectivity.
Reproducible Builds with BuildKit for Software Supply Chain Security
Learn how BuildKit enables reproducible builds to enhance software supply chain security, ensuring verifiable and trustworthy Docker images through bit-for-bit identical reproduction from source code.
Hacking a Docker Container Registry
Explore techniques for compromising Docker container registries, uncovering vulnerabilities and potential security risks in containerized environments.
Using Vulhub for Dockerized Vulnerability Replication
Explore Vulhub for hands-on vulnerability replication. Learn to set up Docker environments, simulate Heartbleed and Log4j vulnerabilities, and gain practical cybersecurity experience.
Rolling out the C2 - Modern Red Team Infrastructure in 2024
Explore modern red team infrastructure setup using Azure Cloud, Tailscale VPN, GitLab, and containerization. Learn to deploy secure C2 systems for effective penetration testing and security assessments.