www-project-kubernetes-top-ten

www-project-kubernetes-top-ten copied to clipboard

fix example attacks scenarios

2

Fix [issue 53](https://github.com/OWASP/www-project-kubernetes-top-ten/issues/53): launching a pod with _automountServiceAccountToken_ set to **True** and inside the container tried to access to the secret resources.

Sk3pper

Creating an Ingress Object without TLS certificates can be a security concern, as it may lead to potential vulnerabilities and data exposure. While TLS can be used for encryption, TLS...

nigeldouglas-itcarlow

I tired to replicate the Unnecessary use of LIST permission example attack but it does not work. I think the problem is that in the K8s version before 1.24, every...

Sk3pper

Update K04-policy-enforcement.md

8

Adding a quick description of tools (OPA Gatekeeper, Kyverno, and Kubewarden).

Ali-Yazdani

Hi, I added in an attack scenario for Insecure Workload Configurations. This attack scenario uses a compromised Pod to install and run Nmap to gain network visibility to the Clusters...

AdminTurnedDevOps

Add Cailyn's details after I forgot to accept the edit (whoops)

raesene

⚠️ This PR has been generated by [Arkadii Yakovets](https://github.com/arkid15r) as part of the [OWASP Schema](https://github.com/OWASP/nest-schema) initiative within [OWASP Nest](https://github.com/OWASP/Nest). ## OWASP Entity Information - **Project**: OWASP Kubernetes Top Ten -...

owasp-nest[bot]