Hardening Kubernetes Security with Falco: Runtime Threat Detection
.png "Hardening Kubernetes Security with Falco: Runtime Threat Detection")
Kubernetes has become a cornerstone of modern cloud-native applications, offering powerful orchestration capabilities for containerized applications. However, its complexity also introduces security challenges. Falco, an open-source runtime security tool, can help mitigate these challenges by providing real-time threat detection capabilities. This guide will delve into the technical details of using Falco to enhance Kubernetes security. What is Falco? Falco is an...
Lockdoor Framework : A Penetration Testing Framework with Cyber Security Resources
LockDoor is a Framework aimed at helping penetration testers, bug bounty hunters And cyber security engineers. This tool is designed for Debian/Ubuntu/ArchLinux based distributions to create a similar and familiar distribution for Penetration Testing. But containing the favorite and the most used tools by Pentesters. As pentesters, most of us has his personal ' /pentest/ ' directory so this Framework is...
Sub.sh : Online Subdomain Detect Script
Sub.sh is a script to detect subdomain online. So let us have a look on it usage. Script bash sub.sh webscantest.com./sub.sh webscantest.com Curl curl -s -L https://raw.githubusercontent.com/cihanmehmet/sub.sh/master/sub.sh | bash -s webscantest.com Also Read - Re-composer : Randomly Changes Win32/64 PE Files For ‘Safer’ Uploading To Malware & Sandbox Sites Subdomain Alive Check bash sub_alive.sh bing.comcurl -s -L https://raw.githubusercontent.com/cihanmehmet/sub.sh/master/sub_alive.sh | bash -s bing.com" Fping Required Nmap -sn (No...
Cryptondie : A Ransomware Developed For Study Purposes
CryptonDie is a ransomware developed for study purposes. Options --key key used to encrypt and decrypt files, default is random string(recommended) --dir Home directory for the attack, default is / --encrypt Encrypt all files...
Re-composer : Randomly Changes Win32/64 PE Files For ‘Safer’ Uploading To Malware & Sandbox Sites
Ever have that not so safe feeling uploading your malware binaries to VirusTotal or other AV sites because you can look up binaries by hashes? Recomposer will take your binary and randomly do the following: Change the file nameChange the section namesChange the section flagsInjection random number of five different types of nops into each available code cave over 20...
DumpsterFire : Toolset – Security Incidents In A Box!
The DumpsterFire Toolset is a modular, menu-driven, cross-platform tool for building repeatable, time-delayed, distributed security events. Easily create custom event chains for Blue Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Turn paper tabletop exercises into controlled "live fire" range events. Build event sequences ("narratives")...
Terraform AWS Secure Baseline : To Set Up Your AWS Account
Terraform Aws Secure Baseline is a terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations. Terraform Module Registry A terraform module to set up your AWS account with the reasonably secure configuration baseline. Most configurations are based on CIS Amazon Web Services Foundations v1.2.0. Starting from v0.10.0, this module requires Terraform...
SecurityNotFound : 404 Page Not Found Webshell
Clone or download the project: git clone https://github.com/CosasDePuma/SecurityNotFound.git SecurityNotFoundcd SecurityNotFound Installation The src/404.php file should be located on the target server.That server must have the ability to execute .php files.Here is an example of some of the most common routes on which servers are located: # 🏁 Windows (Xampp) C:Xampphtdocs# 🐧 Linux /var/www/html/ Note: Obviously, you and I know that you have legitimate...
HRShell : HTTPS/HTTP Reverse Shell Built With Flask
HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities. It is an HTTPS/HTTP reverse shell built with flask. It's compatible with python 3.x and has been successfully tested on: Linux ubuntu 18.04 LTS, Kali Linux 2019.3 macOS Mojave Windows 7/10 Features: It's stealthyTLS support Either using on-the-fly certificates orBy specifying a cert/key pair (more details...
Kube-Alien : Tool To Launch Attack On k8s Cluster
Kube-Alien tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorized_keys file by using this image https://github.com/nixwizard/dockercloud-authorizedkeys (Can be adjusted using ADD_AUTHKEYS_IMAGE param in...
