kholcomb

books

List of books for Software Engineer

Terramaid

A utility for generating Mermaid diagrams from Terraform configurations

kube-bench

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

kdigger

Kubernetes focused container assessment and context discovery tool for penetration testing

peirates

Peirates - Kubernetes Penetration Testing tool

OpenLens

OpenLens Binary Build Repository

ssc-reading-list

A reading list for software supply-chain security.

kubernetes-goat

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

cicd-goat

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

simulator

Kubernetes Security Training Platform - focusing on security mitigation

hadolint

Dockerfile linter, validate inline bash, written in Haskell

ctop

Top-like interface for container metrics

from-scratch

A hands-on walkthrough for creating an extremely insecure Kubernetes cluster and then hardening it, step by step.

kube-hunter

Hunt for security weaknesses in Kubernetes clusters

kubectl-who-can

Show who has RBAC permissions to perform actions on different resources in Kubernetes

rback

RBAC in Kubernetes visualizer

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

ckad-kind

kind CKAD lab environment

grype

A vulnerability scanner for container images and filesystems

aws-eks-best-practices

A best practices guide for day 2 operations, including operational excellence, security, reliability, performance efficiency, and cost optimization.

build-containers-the-hard-way

GitBook on the low-level details of building Docker containers.

botb

A container analysis and exploitation tool for pentesters and engineers.

amicontained

Container introspection tool. Find out what container runtime is being used as well as features available.

Docker-OSX

Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers.

docker-drawio

Dockerized draw.io based on whichever is the most secure image at the time.

conflictmodeling

A place to gather and organize information about using threat modeling frameworks to deal with social conflict in online systems

docker-ripper

The best way to automatically rip optical disks using docker!

red-kube

Red Team K8S Adversary Emulation Based on kubectl

detect-secrets-server

Red-Team-Infrastructure-Wiki

Wiki to collect Red Team infrastructure hardening resources