simulator: Kubernetes Security Training Platform

Simulator A distributed systems and infrastructure simulator for attacking and debugging Kubernetes: simulator creates a Kubernetes cluster for you in your AWS account; runs scenarios that misconfigure it and/or leave it vulnerable to compromise and trains you in mitigating against these vulnerabilities. Why did I start this? I started this project as I needed a way […]

kubesec v2.3.1 alpha releases: Security risk analysis for Kubernetes resources

kubesec Security risk analysis for Kubernetes resources Changelog v2.3.1 alpha 76b2707 Modified the GH actions release to work with go modules b96a1d6 Swapped goreleaser hook to use go modules 68ced39 Merged master into go-mod-test 388b806 Updated travis and… The post kubesec v2.3.1 alpha releases: Security risk analysis for Kubernetes resources appeared first on Penetration Testing.

Kubolt – Utility for Scanning Public Kubernetes Clusters

Kubolt is simple utility for scanning public unauthinticated kubernetes clusters and run commands inside containers Why? Sometimes, the kubelet port 10250 is open to unauthorized access and makes it possible to run commands inside the containers using getrun function from kubelet: // getRun handles requests to run a command inside a container. func (s *Server) […]

Rancher launches k3OS, the first Kubernetes operating system

Rancher Labs introduced k3OS, the industry’s first extremely lightweight operating system for Kubernetes. It has extremely low resource consumption, minimal operation, and second-level boot, which greatly simplifies in low-resource computing environments. Kubernetes operation, improve the security of Kubernetes operation and maintenance and fully enable edge computing scenarios. 3OS is a linux distribution designed to remove […]