Posts on devsecops
41 posts on devsecops. Notes from public sources and my own test lab.
K8s: Conductor or Vulnerability Factory? Hidden Bombs in YAML Files
Let's talk about the 'dark side' of Kubernetes configurations. From over-privileged RBAC roles to container escapes, here is how those 'default' settings turn into a Red Teamer's playground.
Is Everyone Root in Your K8s Cluster? Let's Stop the Orchestration Chaos
A deep dive into common Kubernetes security pitfalls like wide-open API servers and over-privileged RBAC roles, and how to secure them from a Red Teamer's perspective.
The Calm Before the Runtime Storm: Container Escapes and Monitoring Strategies
The moment you spot `cap_sys_admin` in a privileged container, isolation is essentially dead. Let’s talk about how containers break, why the privileged flag is a disaster, and how to actually lock things down.
The Orchestrator or an Insider Trojan? Invisible Dangers in the Kubernetes World
Security has shifted from physical firewalls to the orchestration layer. Let's dive into the dark corners of Kubernetes security—from API Server leaks to RBAC misconfigurations—and talk about how to keep the cluster safe.
Docker's 'Privileged' Trap: Trojan Horses Inside Containers
Think that --privileged flag is a lifesaver? Think again. Here is how container misconfigurations turn into open doors for attackers, based on my early career blunders and Red Team field experience.
From Docker Socket to Root Shell: Is Container Isolation an Illusion?
A deep dive into how misconfigured Docker containers, privileged flags, and exposed sockets turn your 'secure' environment into a playground for Red Teamers.
Handing Over Your K8s Cluster on a Silver Platter: Config Errors and Cold Hard Truths
Ever wondered how a single YAML line can turn your infrastructure into a public playground? Let's dive into common Kubernetes misconfigurations from a Red Team perspective and look at how to actually secure them.
Betrayal of the Dependencies: The Art of Supply Chain Attacks and Defense
Ever wondered how a single typo in your package.json could compromise your entire infrastructure? Let's dive into the world of Software Supply Chain security and learn how to defend your fortress from the inside out.
Getting Lost in YAML: The High Cost of Leaving Kubernetes Security to 'Default' Settings
Think your K8s cluster is secure because it's 'running'? Think again. From RBAC nightmares to privileged pod escapes, let's look at why default settings are a Red Teamer's best friend.
A Tale of Isolation and Container Chaos: Where Do We Go Wrong While Getting 'Dockerized'?
Think containers are inherently secure? Think again. From bloated base images to secret leaks in layers, let's explore how 'dockerized' applications actually fall apart and how to fix them.
The Day You Exposed Kube-apiserver to the Internet, You Handed Over the Keys to Your Cluster
If you aren't seeing 401 or 403 errors in your logs, you're either not being targeted or you're already compromised. Let's dive into the dirty realities of Kubernetes security and how to harden your cluster.
When the Foundations Crumble: Software Supply Chain and 'Dependency Hell'
Think you're safe behind your firewall? Think again. The real threat might be that 'npm install' you just ran. Let's dive into the messy world of Software Supply Chain attacks and how they turn your trust against you.