bgeesaman/malicious-compliance bgeesaman/malicious-compliance

  • Stars
    star
    65
  • Rank 473,702 (Top 10 %)
  • Language Makefile
  • Created over 1 year ago
  • Updated 12 months ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
bgeesaman/malicious-compliance
github

bgeesaman

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Supporting code and demos for KubeCon EU 2023 talk "Malicious Compliance: Reflections on Trusting Container Image Scanners"

More Repositories

1

kube-env-stealer

Automated GKE Kubelet Impersonation and Cluster Secret Stealer via kube-env
Shell
102
star
2

kubeatf

Shell
55
star
3

gkesecurity-guide

HTML
38
star
4

hhkbe

CSS
35
star
5

subpath-exploit

Writeup of CVE-2017-1002101 with sample "exploit"/escape
Shell
35
star
6

kubecon-eu-2020-demo-files

Shell
10
star
7

k8s-security-demos

Demo of several cluster attack paths using a Kind cluster with Calico for NetworkPolicy support.
9
star
8

kubectl-honk

Shell
9
star
9

registry-search-order

Landing page for those who "accidentally" ran a container image from an org-squatted container registry location
Go
8
star
10

inspec-k8s-sample

A basic example Kubernetes (K8s) Chef InSpec Profile
Ruby
7
star
11

maas

DNSMasq based Mac Netboot and PC PXE docker container
Shell
4
star
12

nginx-test

Purposefully malicious webshell packaged in a Helm Chart
Go
2
star
13

cve-2018-1002105

PoC command injection example for cve-2018-1002105 based off https://github.com/gravitational/cve-2018-1002105
Go
1
star