Containers & DevSecOps Kubernetes RBAC Abuse and Privilege Escalation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps
Containers & DevSecOps 
Containers & DevSecOps Kubernetes Secrets and etcd Exposure
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Docker Image Security: Layers, Secrets, and Scanning
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Container Escapes: Privileged Containers and Host Mounts
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Admission Control and Pod Security in Kubernetes
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Infrastructure as Code Security: Terraform and Misconfigs
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps CI/CD Pipeline Attacks and Supply-Chain Risk
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Preventing and Remediating Secrets in Source Control
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Dependency Confusion and Package-Manager Security
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Software Bill of Materials (SBOM) in Practice
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Linux Namespaces and cgroups: The Building Blocks of Containers
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Docker Security Fundamentals and Hardening: From Capabilities to Rootless Containers
A practical guide to hardening Docker: Linux capabilities, seccomp, rootless mode, --privileged risks, and image scanning.
Containers & DevSecOps Advanced Container Escape Techniques: From CAP_SYS_ADMIN to Host Root
A practical look at advanced container escape primitives — release_agent, /proc abuse, host mounts, and runc CVEs.
Containers & DevSecOps Kubernetes RBAC Attacks: Privilege Escalation from a Compromised Service Account
How attackers abuse Kubernetes RBAC roles, bindings, and service account tokens to escalate to cluster-admin, and how to defend.
Containers & DevSecOps Attacking the Kubernetes API Server and etcd: A Practical Offensive Guide
Hands-on offensive techniques against the Kubernetes control plane: anonymous auth, etcd secret extraction, kubelet API, and exposed dashboards.
Containers & DevSecOps Breaking and Hardening Kubernetes Pods: Pod Security Standards, OPA Gatekeeper, and Kyverno
An offensive and defensive tour of Kubernetes pod admission control: Pod Security Standards, securityContext, OPA Gatekeeper, and Kyverno.
Containers & DevSecOps Auditing Kubernetes Clusters with kube-bench and kube-hunter
A practical guide to auditing Kubernetes for CIS benchmark gaps and exploitable misconfigs, then remediating them.
Containers & DevSecOps Securing the Software Supply Chain: SBOM, Sigstore, and SLSA in Practice
A hands-on guide to attacking and defending the software supply chain with SBOM, cosign, Sigstore, and SLSA.
Containers & DevSecOps Attacking CI/CD Pipelines: Exploiting GitHub Actions and Jenkins
A practical offensive and defensive walkthrough of pwn requests, PPE, secrets exfiltration, and OIDC abuse in GitHub Actions and Jenkins.
Containers & DevSecOps Secrets Management and Hunting Leaked Secrets in Git
Hunt leaked credentials in git history with gitleaks and trufflehog, then lock them down with HashiCorp Vault.
Containers & DevSecOps Infrastructure as Code Security: Hunting Bugs in Terraform with tfsec and Checkov
A practical guide to attacking and defending Terraform: state file secrets, drift, least privilege, and IaC scanning with tfsec and Checkov.