CVE-2018-9206 Workshop
Hands-on workshop exploring CVE-2018-9206 file upload vulnerability in Docker. Learn about causes, patches, and bypasses for this security flaw through practical exploitation exercises.
Pivoting and Exploitation in Docker Environment
Demostración de técnicas de pivoting, explotación y escalada de privilegios en entornos Docker con múltiples redes. Incluye metodologías de pentest y superación de obstáculos en diferentes configuraciones de red.
Cloudtopolis - Zero Infrastructure Password Cracking
Herramienta para crackeo de contrase ñas sin infraestructura dedicada, usando Google Cloud Shell y Collaboratory. Permite trabajo colaborativo y uso de recursos locales junto con GPUs de Colab.
From Void to Monje Newbie - Containers no son Docker pero Docker es un container
Explora las mejores prácticas de seguridad en DevSecOps, enfocándose en contenedores y Docker. Aprende sobre tecnologías cloud y cómo implementar seguridad en el ciclo de vida de las aplicaciones.
Pentesting and Securing Docker, Swarm & Kubernetes
Entrevista con Sheila Berta sobre su formación en pentesting y seguridad de entornos Docker, Swarm y Kubernetes. Se discute su carrera en ciberseguridad y su experiencia como investigadora y ponente internacional.
An Introduction to Container Hacking
Explora técnicas de hacking en contenedores, abordando vulnerabilidades y mejores prácticas de seguridad en entornos DevSecOps y tecnologías cloud con el experto Rory McCune.
Workadventure Selbst Betreiben - Ein Serviervorschlag
Learn to set up and operate your own WorkAdventure instance, a pixel-world platform. Discover the necessary steps, server requirements, and configuration process using Ansible and Docker on a Debian VM.
Workadventure Selbst Betreiben - Ein Serviervorschlag
Einstiegshilfe zum Aufsetzen und Betreiben einer WorkAdventure-Instanz. Minimaler Aufwand für eigene Pixel-Welt-Server mit Ansible, Docker und Debian. Ermöglicht Nutzung eigener oder öffentlicher Welt-Designs.
State of the Osmocom TTCN-3 Test Suites
Comprehensive overview of Osmocom TTCN-3 test suites, covering their status, testing methods, and automation using Jenkins and Docker for mobile network protocols.
Tales of Red Teaming - Continuous Intrusion Continuous Deception
Explore advanced red teaming techniques for attacking large corporate networks, including compromising deployment systems, backdooring software, breaking out of containers, and exploiting misconfigurations in multi-tenant systems.
Containers - Your Ally in Improving Security
Explore built-in security tactics for Kubernetes and Docker, including automated configurations, read-only filesystems, and limiting cross-container communications to enhance service security.
CTF Writeup - Log 'em All
Detailed walkthrough of a challenging Hacking/Reverse Engineering CTF challenge inspired by a Pokemon Red bug, with step-by-step instructions for setup and execution.
Outside the Box - Breakouts and Privilege Escalation in Container Environments
Explore real-world container escapes and privilege escalation techniques in popular solutions like Docker and Kubernetes. Learn methodologies for assessing containerized environments and implementing secure configurations.
A Container Stack for OpenStack
Explore OpenStack's integration with Linux, Docker, and Kubernetes for modern containerized applications, covering architecture, orchestration, networking, and storage solutions.
From Monolith to Containers - How Verizon Containerized Legacy Applications on OpenShift
Explore Verizon's journey in containerizing legacy applications using OpenShift, including challenges, successes, and lessons learned in modernizing critical revenue-generating systems.
Microservices and FaaS for Offensive Security
Explore offensive security using microservices and FaaS, covering Lambda, Google Cloud, IBM OpenWhisk, and more. Learn practical applications and improvements for cybersecurity projects.
Prisoner Number Six
Explore Docker container escape techniques through live demonstrations, covering reconnaissance, exploiting vulnerabilities, and gaining system access. Learn practical cybersecurity skills for container environments.
Creating a Buzz - Tales of Building WordPress Honeypots at Scale
Explore the world of WordPress honeypots, their deployment at scale, and surprising insights into black-hat tactics in this intriguing cybersecurity presentation.
Kubernetes and Microservices with Oracle Database
Explore Oracle Database integration with Docker, Kubernetes, and microservices. Learn current capabilities and future developments for efficient deployment and management of mission-critical applications.
AppSec Pipelines and Event-based Security - Moving Beyond a Traditional Security Test
Strategies for scaling AppSec programs using automation, continuous health checks, and event-based security to keep pace with rapid software development and delivery in large organizations.
A Wander Through the World of Container Security
Explore container security, from Docker to Kubernetes, covering breakout vulnerabilities, networking challenges, and RBAC. Gain insights into potential threats and future attack vectors in containerized environments.