Cloud Security Cloud Credential Harvesting and Secret Sprawl
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
secrets
Cloud Security 
Containers & DevSecOps Kubernetes Secrets and etcd Exposure
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Docker Image Security: Layers, Secrets, and Scanning
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps CI/CD Pipeline Attacks and Supply-Chain Risk
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security Azure Key Vault: Access Policies vs RBAC
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Preventing and Remediating Secrets in Source Control
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Security Just-in-Time Access and Secrets Rotation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Attacking the Kubernetes API Server and etcd: A Practical Offensive Guide
Hands-on offensive techniques against the Kubernetes control plane: anonymous auth, etcd secret extraction, kubelet API, and exposed dashboards.
Containers & DevSecOps Attacking CI/CD Pipelines: Exploiting GitHub Actions and Jenkins
A practical offensive and defensive walkthrough of pwn requests, PPE, secrets exfiltration, and OIDC abuse in GitHub Actions and Jenkins.
Containers & DevSecOps Secrets Management and Hunting Leaked Secrets in Git
Hunt leaked credentials in git history with gitleaks and trufflehog, then lock them down with HashiCorp Vault.