Containers & DevSecOps Kubernetes RBAC Abuse and Privilege Escalation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
container-security
Containers & DevSecOps 
Containers & DevSecOps Kubernetes Secrets and etcd Exposure
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Docker Image Security: Layers, Secrets, and Scanning
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Container Escapes: Privileged Containers and Host Mounts
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc SELinux and AppArmor: Enforcement Models and Misconfigurations
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Linux Namespaces and cgroups: The Building Blocks of Containers
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc Privilege Escalation via the Docker Group: From User to Root
How membership in the docker group is equivalent to root, with PoCs for volume mounts and privileged containers, plus detection.
Tools & Defense Kubernetes Security 101: From kubectl to RBAC and Token Theft
A practical intro to Kubernetes security: kubectl, RBAC, service account token abuse, kube-hunter scanning, and how to defend.
Tools & Defense Breaking Out: A Practical Guide to Linux Container Escape Techniques
How privileged containers, host mounts, cgroups, and CAP_SYS_ADMIN lead to container escape, plus blue-team defenses.
Containers & DevSecOps Docker Security Fundamentals and Hardening: From Capabilities to Rootless Containers
A practical guide to hardening Docker: Linux capabilities, seccomp, rootless mode, --privileged risks, and image scanning.
Containers & DevSecOps Advanced Container Escape Techniques: From CAP_SYS_ADMIN to Host Root
A practical look at advanced container escape primitives — release_agent, /proc abuse, host mounts, and runc CVEs.
Containers & DevSecOps Kubernetes RBAC Attacks: Privilege Escalation from a Compromised Service Account
How attackers abuse Kubernetes RBAC roles, bindings, and service account tokens to escalate to cluster-admin, and how to defend.
Containers & DevSecOps Attacking the Kubernetes API Server and etcd: A Practical Offensive Guide
Hands-on offensive techniques against the Kubernetes control plane: anonymous auth, etcd secret extraction, kubelet API, and exposed dashboards.