r0binak

kubernetes

Production-Grade Container Scheduling and Management

traitor

:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

OpenLens

OpenLens Binary Build Repository

CDK

📦 Make security testing of K8s, Docker, and Containerd easier.

kubetools

Kubetools - Curated List of Kubernetes Tools

cloudfox

Automating situational awareness for cloud penetration tests.

cvemap

Navigate the CVE jungle with ease.

microcks

The open source, cloud native tool for API Mocking and Testing. Microcks is a Cloud Native Computing Foundation sandbox project 🚀

AutoPWN-Suite

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

DDexec

A technique to run binaries filelessly and stealthily on Linux by "overwriting" the shell's process with another.

KubeHound

Tool for building Kubernetes attack paths

hacktricks-cloud

security-labs-pocs

Proof of concept code for Datadog Security Labs referenced exploits.

CVE-2022-0185

CVE-2022-0185

awesome-kubernetes-threat-detection

A curated list of resources about detecting threats and defending Kubernetes systems.

CVE-2022-2992

Authenticated Remote Command Execution in Gitlab via GitHub import

MTKPI

🧰 Multi Tool Kubernetes Pentest Image

sbom-operator

Catalogue all images of a Kubernetes cluster to multiple targets with Syft

KubeLight

OWASP Kubernetes security and compliance tool [WIP]

container-security-site

Falco-bypasses

Research on various techniques to bypass default falco ruleset (based on falco v0.28.1).

kubetcd

Post-exploit a compromised etcd, gain persistence and remote shell to nodes.

malicious-compliance

Supporting code and demos for KubeCon EU 2023 talk "Malicious Compliance: Reflections on Trusting Container Image Scanners"

DDexec

sneeffer

Sneefer is a PoC project showing how to filter out irrelevent vulnerabilities from container image vulnerability scan results. It is based on application monitoring using eBPF and Falco base libraries and writes results in Kubernetes CRDs

kubekit

kubernetes rootkit

gatekeeper-external-data-provider

A template repository for building external data providers for Gatekeeper.

kuball

Multicontext CLI for kubectl. All contexts at once or by keyword.

russian-checkers

Russian checkers on C# with mini-max and alpha-beta pruning

metrics-collector