Kubernetes Security 101 - Best Practices to Secure Your Cluster
Learn essential best practices for securing Kubernetes clusters, covering key vulnerabilities, attack vectors, and protective measures to safeguard containerized applications.
Practical Security in the Brave New Kubernetes World
Explore Kubernetes security vulnerabilities through hands-on recon and exploitation of clusters, sidecars, and supporting infrastructure. Learn practical techniques for compromising and persisting in real-world K8s environments.
From the Cluster to the Cloud and Back to the Cluster - Lateral Movements in Kubernetes
Explore Kubernetes lateral movements, identity types, and cluster-to-cloud authentication methods. Learn about real-world misconfigurations leading to cluster takeovers and prevention strategies.
A Monitoring Platform for Kubernetes Cluster Security
Explore a centralized logging system for Kubernetes, enabling visualization of intracluster activity and detection of potential security threats through live demonstrations and open-source tools.
Kubernetes Goat - Vulnerable by Design Kubernetes Environment
Explore Kubernetes security through a vulnerable-by-design cluster environment. Learn to identify and mitigate real-world vulnerabilities, enhancing your cloud-native infrastructure protection skills.
Tales of Red Teaming - Continuous Intrusion Continuous Deception
Explore advanced red teaming techniques for attacking large corporate networks, including compromising deployment systems, backdooring software, breaking out of containers, and exploiting misconfigurations in multi-tenant systems.
KubeScope for the Extraordinary World of Containers
Explore KubeScope, a tool combining machine learning and rule-based detection to secure Kubernetes deployments against various threats, including malformed input attacks, DDoS, and credential leaks.
K-Rail - A Tool to Manage K8s Securely at Speed
Explore offensive and defensive scenarios in Kubernetes security, and learn about k-rail, a tool for mitigating risks and managing configurations securely at scale.
Securing Kubernetes
Explore Kubernetes security, covering authentication, authorization, and integration with Hashicorp Vault's PKI backend for enhanced transport security and access control.
Flying Above the Clouds - Securing Kubernetes
Explore Kubernetes security, from container isolation to authentication and authorization. Learn to build resilient cloud-native systems and deploy secure services in a distributed environment.
Live Security Hack - Hack My Mis-configured Kubernetes
Hands-on demonstration of exploiting Kubernetes vulnerabilities, showcasing attack progression and providing preventive measures for enhanced cluster security.
Deep Dive into a Kubernetes CVE
Explore a critical Kubernetes vulnerability, its exploitation, and defense strategies through a deep dive into CVE-2018-1002105, including live hacking demonstrations and practical mitigation advice.
The Path Less Traveled - Abusing Kubernetes Defaults
Explore Kubernetes vulnerabilities, attack paths, and mitigations in default configurations through live demonstrations, focusing on cluster takeovers and host escapes.
Advanced Persistence Threats - The Future of Kubernetes Attacks
Explore advanced Kubernetes attacks, their detection, and prevention methods. Gain insights into sophisticated threats and practical security techniques for protecting clusters.
Command and KubeCTL - Real-World Kubernetes Security for Pentesters
Explore Kubernetes security challenges, attack techniques, and practical advice for pentesters and security practitioners in containerized environments.
Practical Kubernetes Security Learning using Kubernetes Goat
Explore Kubernetes security vulnerabilities using Kubernetes Goat, a "vulnerable by design" environment. Learn to assess and improve cloud-native infrastructure security posture through hands-on practice.
Applied Defense on Docker and Kubernetes
Implement advanced security features for Docker and Kubernetes environments. Learn to protect containerized ecosystems, secure daemons, and safeguard orchestrated deployments against potential threats.
Know Your Kubernetes Deploys
Explore Shopify's approach to securing Kubernetes deployments through container signatures and admission controllers, ensuring a robust software supply chain.
Hacking Containers, Kubernetes and Clouds
Demonstrating how tokens left in containers can lead to full cluster and cloud resource control, highlighting critical security vulnerabilities in Kubernetes environments.
Kubernetes Security 101
Comprehensive overview of Kubernetes security layers, covering sysadmin, developer, and security team perspectives. Explores hardening guides, container security, deployment strategies, and collaborative approaches.
Extend Your Kubernetes With the Power of Open Source
Discover open-source projects to enhance Kubernetes capabilities, including event-driven autoscaling, package management, GitOps, and security. Gain practical insights and demos for advanced Kubernetes implementation.