38 results found Sort:

aquasecurity
kube-bench aquasecurity
1.2k
7.0k
apache-2.0
105
Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
openshift kube-bench kubernetes cis-security cis-benchmark hacktoberfest kubernetes-security cis-kubernetes-benchmark
Created 2017-06-19
1,108 commits to main branch, last one a day ago
techiescamp
kubernetes-learning-path techiescamp
862
6.8k
unknown
149
A roadmap to learn Kubernetes from scratch (Beginner to Advanced level)
k8s kubernetes kubernetes-setup kubernetes-cluster kubernetes-learning kubernetes-security kubernetes-deployment kubernetes-learning-apth
Created 2022-11-16
206 commits to main branch, last one a day ago
madhuakula
kubernetes-goat madhuakula
709
4.4k
mit
56
Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
k8s owasp docker hacking redteam blueteam security container devsecops kubernetes pentesting cloud-native cloudsecurity cloud-security infrastructure vulnerable-app kubernetes-goat container-security kubernetes-security
Created 2020-06-04
273 commits to master branch, last one 2 months ago
cdk-team
CDK cdk-team
543
3.9k
apache-2.0
69
📦 Make security testing of K8s, Docker, and Containerd easier.
k8s hitb linux docker blackhat exploits container hacktools kubernetes penetration cloud-native vulnerabilities container-escape container-security kernel-exploitation kubernetes-security privilege-escalation cloud-native-security k8s-penetration-toolkit penetration-testing-tools
Created 2020-11-05
238 commits to main branch, last one 2 months ago
walidshaari
Certified-Kubernetes-Security-Specialist walidshaari
533
2.0k
cc-by-sa-4.0
91
Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or maki...
cks pod ckss falco trivy policy seccomp apparmor security kube-bench kubernetes kube-hunter mitre-attack os-footprint certification exam-objectives kernel-hardening open-policy-agent kubernetes-security pod-security-policy
Created 2020-08-19
116 commits to main branch, last one 4 months ago
DataDog
stratus-red-team DataDog
212
1.8k
apache-2.0
38
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
aws security purple-team aws-security gcp-security mitre-attack azure-security cloud-security threat-detection adversary-emulation kubernetes-security cloud-native-security detection-engineering
Created 2022-01-07
693 commits to main branch, last one 16 hours ago
HummerRisk
HummerRisk HummerRisk
293
1.8k
gpl-3.0
111
HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。
cspm sbom trivy prowler security compliance cloud-native k8s-security vulnerability cloud-custodian compliance-as-code kubernetes-security cloud-native-security
Created 2022-06-03
3,116 commits to master branch, last one about a year ago
Metarget
metarget Metarget
169
1.1k
apache-2.0
18
Metarget is a framework providing automatic constructions of vulnerable infrastructures.
target container kubernetes cloud-native vulnerabilities container-escape vulnerable-scenes container-security kernel-exploitation kubernetes-security privilege-escalation cloud-native-security vulnerable-infrastructure vulnerable-infrastructures
Created 2021-04-09
370 commits to master branch, last one 6 days ago
paralus
paralus paralus
65
1.0k
apache-2.0
10
All-in-one Kubernetes access manager. User-level credentials, RBAC, SSO, audit logs.
ztka cloud-security access-management kubernetes-security zero-trust-security k8s-access-management
Created 2022-06-10
674 commits to main branch, last one 2 months ago
vchinnipilli
kubestriker vchinnipilli
105
990
apache-2.0
28
A Blazing fast Security Auditing tool for Kubernetes
aks aws eks gke azure devops docker infosec security automation containers kubernetes security-audit security-tools docker-security container-security informationsecurity kubernetes-security
Created 2020-12-08
39 commits to master branch, last one 3 years ago
edgelesssys
constellation edgelesssys
52
949
agpl-3.0
15
Constellation is the first Confidential Kubernetes. Constellation shields entire Kubernetes clusters from the (cloud) infrastructure using confidential computing.
kubernetes cloud-security data-encryption kubernetes-security confidential-computing
Created 2022-08-28
4,422 commits to main branch, last one 22 hours ago
ksoclabs
awesome-kubernetes-security ksoclabs
121
902
unknown
33
A curated list of awesome Kubernetes security resources
kubernetes awesome-list kubernetes-security
Created 2019-05-21
54 commits to master branch, last one about a year ago
ViktorUJ
cks ViktorUJ
162
900
apache-2.0
19
Open-source Platform for learning kubernetes and aws eks and preparation for for Certified Kubernetes exams (CKA ,CKS , CKAD)
aws cka cks eks k8s opa ckad falco devops kubeadm terraform kubernetes learn-kubernetes cka-exam-questions cks-exam-questions kubernetes-cluster ckad-exam-questions kubernetes-learning kubernetes-security certified-kubernetes-security-specialist
Created 2023-01-22
124 commits to master branch, last one 10 days ago
DataDog
KubeHound DataDog
44
772
apache-2.0
15
Tool for building Kubernetes attack paths
exploit red-team kubernetes purple-team attack-graph attack-paths mitre-attack security-audit security-tools adversary-emulation kubernetes-security security-automation cloud-native-security
Created 2023-05-15
459 commits to main branch, last one 14 days ago
kabachook
k8s-security kabachook
71
712
unknown
30
Kubernetes security notes and best practices
attacker security checklist kubernetes best-practices vulnerabilities kubernetes-cluster kubernetes-security
Created 2019-07-16
70 commits to master branch, last one 2 years ago
mikeroyal
eBPF-Guide mikeroyal
48
540
unknown
13
eBPF (extended Berkeley Packet Filter) Guide. Learn all about the eBPF Tools and Libraries for Security, Monitoring , and Networking.
bpf xdp ebpf falco sandbox tracing log-analysis ebpf-programs observability open-telemetry packet-sniffer network-analysis kubernetes-cluster traffic-monitoring distributed-tracing kubernetes-security real-user-monitoring performance-monitoring vulnerability-detection infrastructure-monitoring
Created 2021-12-12
42 commits to main branch, last one 10 months ago
HXSecurity
TerraformGoat HXSecurity
82
532
apache-2.0
8
TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.
gcp security terraform aws-security gcp-security cloudsecurity azure-security cloud-security kubernetes-security
Created 2022-04-28
231 commits to main branch, last one about a year ago
Vinum-Security
kubernetes-security-checklist Vinum-Security
94
464
unknown
16
Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, workloads, dockerfile)
security checklist devsecops kubernetes requirments container-security kubernetes-security cloud-native-security
Created 2021-10-12
22 commits to main branch, last one 2 years ago
darkbitio
mkit darkbitio
26
401
mit
16
MKIT is a Managed Kubernetes Inspection Tool that validates several common security-related configuration settings of managed Kubernetes cluster objects and the workloads/resources running inside the ...
aks aws eks gcp gke k8s azure kubernetes kubernetes-security
This repository has been archived (exclude archived)
Created 2020-03-26
48 commits to master branch, last one 4 years ago
PaloAltoNetworks
rbac-police PaloAltoNetworks
35
336
mit
11
Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego
rbac security kubernetes prisma-cloud kubernetes-rbac kubernetes-security
Created 2022-05-16
50 commits to main branch, last one about a year ago
DataDog
managed-kubernetes-auditing-toolkit DataDog
18
317
apache-2.0
5
All-in-one auditing toolkit for identifying common security issues in managed Kubernetes environments. Currently supports Amazon EKS.
eks aws-eks kubernetes aws-security managed-kubernetes kubernetes-security
Created 2023-04-03
80 commits to main branch, last one 10 months ago
Metarget
awesome-cloud-native-security Metarget
52
308
unknown
14
awesome resources about cloud native security 🐿
k8s docker container kubernetes serverless cloud-native cloud-security cloud-computing docker-security container-escape container-security kubernetes-security serverless-security cloud-native-security
Created 2021-03-23
158 commits to master branch, last one about a year ago
Metarget
k0otkit Metarget
51
274
unknown
8
k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.
k8s hack-k8s reverse-shell fileless-attack container-escape post-penetration container-security container-injection kubernetes-security
Created 2020-11-18
12 commits to main branch, last one 3 years ago
r0binak
MTKPI r0binak
16
214
mit
5
🧰 Multi Tool Kubernetes Pentest Image
image pentest redteam kubernetes container-security kubernetes-security
Created 2023-08-17
10 commits to main branch, last one 2 months ago
developer-guy
awesome-falco developer-guy
20
198
unknown
13
A curated list of Falco related tools, frameworks, blogs, podcasts, and articles
falco awesome sysdig-falco falco-outputs falcosidekick falco-security kubernetes-security container-runtime-security
Created 2021-02-11
47 commits to main branch, last one 3 years ago
kubewarden
kubewarden-controller kubewarden
33
193
apache-2.0
10
Manage admission policies in your Kubernetes cluster with ease
kubernetes webassembly hacktoberfest policy-as-code kubernetes-security
Created 2020-12-04
1,273 commits to main branch, last one 2 days ago
abdennour
certified-kubernetes-security-specialist abdennour
61
143
unknown
21
References for CKS Exam Objectives - Certified Kubernetes Security Specialist
cks ckss golang security hardening kubernetes certification kubernetes-security
Created 2020-09-16
22 commits to master branch, last one 11 months ago
stacksimplify
google-kubernetes-engine stacksimplify
434
143
unknown
12
Google Kubernetes Engine GKE with DevOps 75 Real-World Demos
gke google google-dns kubernetes google-cloud-sdk google-cloud-build kubernetes-ingress kubernetes-secrets kubernetes-service kubernetes-security google-cloud-storage kubernetes-in-docker google-cloud-platform kubernetes-deployment
Created 2023-02-26
9 commits to main branch, last one 2 months ago
kubewarden
policy-server kubewarden
18
138
apache-2.0
8
Webhook server that evaluates WebAssembly policies to validate Kubernetes requests
rust policy kubernetes webassembly hacktoberfest policy-as-code kubernetes-webhook kubernetes-security
Created 2020-12-15
1,645 commits to main branch, last one 16 hours ago
OWASP
KubeLight OWASP
16
103
apache-2.0
8
OWASP Kubernetes security and compliance tool [WIP]
cis nsa sbom owasp docker python pci-dss scanner security devsecops compliance containers kubernetes cve-scanning security-tools kubernetes-security vulnerability-management
Created 2022-11-28
61 commits to main branch, last one about a year ago