awesome-k8s-security

A curated list for Awesome Kubernetes Security resources
https://github.com/magnologan/awesome-k8s-security

Last synced: about 22 hours ago
JSON representation

The Basics
Official Pages
Talks and Videos
Blogs and Articles
Books
Certifications
CVEs
- Exploring container security: Vulnerability management in open-source Kubernetes
- CVE-2018-18264 - Kubernetes Dashboard bypass authentication
- CVE-2019-11247 - kube-apiserver mistakenly allows access to a cluster-scoped custom resource
- CVE-2019-11249 - kubectl cp command tar exploit
- CVE-2021-25735 - kube-apiserver allow node updates to bypass a Validating Admission Webhook
- CVE-2021-25737 - user may be able to redirect pod traffic to private networks on a node
- CVE-2021-25740 - enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack
- CVE-2021-25741 - user may be able to create a container with subpath volume mounts to access files & directories outside of the volume
- CVE-2021-30465 - runc container filesystem breakout via directory traversal
- CVE-2020-8558 PoC - kube-proxy unexpectedly makes localhost-bound host services available to others on the network
- CVE-2020-8559 PoC - kube-apiserver vulnerable to an unvalidated redirect on proxied upgrade requests
- CVE-2020-8559 PoC 2 - kube-apiserver vulnerable to an unvalidated redirect on proxied upgrade requests
- CVE-2020-10749 PoC - malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks
Slides
Trainings
Repositories / Tools
Community
- K8s Alternatives
- Slacks
- Newsletters
  - kubelist
- Jobs
  - Kube Careers
- K8s Managed Services
  - AKS
  - EKS
- Other Awesome Lists
  - awesome-kubernetes
Papers
- Defending
Podcasts
- Defending

Programming Languages

Go 21 Shell 10 Python 6 HTML 4 TypeScript 3 Ruby 2 Open Policy Agent 1 Dockerfile 1 C++ 1 HCL 1

Categories

Blogs and Articles 69 Repositories / Tools 47 Trainings 19 The Basics 16 Talks and Videos 16 Books 15 Official Pages 13 Community 13 CVEs 13 Certifications 8 Podcasts 6 Papers 6 Slides 4

Sub Categories

Defending 46 Learning 8 Attacking 5 K8s Alternatives 5 Slacks 3 K8s Managed Services 2 Other Awesome Lists 1 Jobs 1 Newsletters 1

Keywords

kubernetes 35 security 20 containers 9 security-tools 7 kubernetes-security 6 cloud-native 6 golang 6 cncf 6 devsecops 5 k8s 5 rbac 5 docker 4 vulnerability-detection 4 container-security 3 kube-bench 3 falco 3 kubectl 3 ckss 3 certification 3 cks 3 devops 3 policy 3 vulnerability-scanners 3 authorization 3 tool 2 audit 2 kubectl-plugins 2 ebpf 2 cloudsecurity 2 vulnerability 2 kube-hunter 2 vulnerabilities 2 mitre-attack 2 hardening 2 trivy 2 infrastructure-as-code 2 iac 2 open-policy-agent 2 best-practice 2 aws 2 azure 2 access-control 2 go 2 rbac-management 2 static-analysis 2 hacking 1 enterprise-kubernetes-products 1 container 1 google-cloud 1 google-kubernetes 1