awesome-DevOpsSec
Archiving for DevOpsSec resources
https://github.com/zer0-kr/awesome-DevOpsSec
Last synced: 8 days ago
JSON representation
-
Resources
-
etc
-
Challenges
-
Documents
-
Articles
- AWS IAM Privilege Escalation – Methods and Mitigation
- My AWS Pentest Methodology
- Detailed Analysis of CloudDon, Cloud Data Breach of Korea e-commerce company
- How I was able to access millions of ID cards on an e-commerce platform
- K8s Standard Architecture(2024)
- 15 Kubernetes Mistakes Side Effects Chart
- 15 Kubernetes Mistakes Side Effects Chart
- 15 Kubernetes Mistakes Side Effects Chart
- 15 Kubernetes Mistakes Side Effects Chart
-
Trannings
-
Workshops
-
Blogs
-
Vulnerabilities
-
Conferences
-
-
🎤 컨퍼런스
-
Tools
-
AWS
- check_imds - IMDSv1 Scanner
- steampipe - zero-ETL solution for getting data directly from APIs and services
- my-arsenal-of-aws-security-tools - List of open source tools for AWS security
- pacu - AWS exploitation framework
- prowler - Security Vulnerability Scanner
- CloudSploit - Cloud Security Posture Management(CSPM)
-
Kubernetes
- Trivy - Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes
- Clair - Vulnerability Static Analysis for Containers
- Falco - Cloud Native Runtime Security
- kube-bench - Checks whether Kubernetes is deployed according to CIS Kubernetes Benchmark
- Kubescape - Kubernetes security platform for your clusters, CI/CD pipelines, and IDE
- kube-hunter - Hunt for security weaknesses in Kubernetes clusters
- managed-kubernetes-auditing-toolkit - identifying common security issues in EKS
-
-
🚨 취약점 DB
-
📄 가이드 & 문서
-
📰 아티클
-
기여하기
- ![Star on GitHub - kr/awesome-DevOpsSec)
-
📝 블로그
-
📚 트레이닝
Sub Categories
Keywords
security
9
kubernetes
8
aws
6
devsecops
5
azure
5
gcp
5
cloud
4
containers
3
docker
3
security-tools
3
cspm
3
aws-security
3
kubernetes-security
3
redteam
3
cloud-attack
2
incident-response
2
oci
2
iam
2
dfir
2
security-audit
2
vulnerability-detection
2
cloudsecurity
2
cloudpentest
2
cloud-security
2
vulnerabilities
2
mitre-attack
2
cloud-native
2
devops
2
cloud-pentesting
2
terraform
2
golang
2
go
2
python
2
cis-benchmark
2
runtime-security
1
cis
1
goat
1
cnapp
1
gcp-security
1
etl
1
azure-security
1
postgresql
1
postgresql-fdw
1
managed-kubernetes
1
eks
1
aws-eks
1
thehive
1
iac
1
infrastructure-as-code
1
response-playbooks
1