Rohit Ghumare
@ghumare64
Kubernetes GOAT 🐐
"Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
Rohit Ghumare
@ghumare64
Kubernetes GOAT 🐐
"Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
Jul 31, 2025
Jul 31, 2025
Joachim HENRY
IT Operations Manager IT Operations Manager
Hum..
après le GOAD (Game Of Active Directory ) que l’on a expérimenté en SAE Cyber cette année (il y’a d’ailleurs un très bon article à ce sujet sur le dernier MISC (lnkd.in/enrRVuBA) merci Cyril Servieres
Ce Kube Goat pourrait être un bon candidat pour l’année prochaine.
Rate this translation
Humph..
after the GOAD (Game Of Active Directory) that we experimented in SAE Cyber this year (there is a very good article on this subject on the last MISC (lnkd.in/enrRVuBA) thank you Cyril Servieres
This Kube Goat could be a good candidate for next year.
Joachim HENRY
IT Operations Manager IT Operations Manager
Hum..
après le GOAD (Game Of Active Directory ) que l’on a expérimenté en SAE Cyber cette année (il y’a d’ailleurs un très bon article à ce sujet sur le dernier MISC (lnkd.in/enrRVuBA) merci Cyril Servieres
Ce Kube Goat pourrait être un bon candidat pour l’année prochaine.
Rate this translation
Humph..
after the GOAD (Game Of Active Directory) that we experimented in SAE Cyber this year (there is a very good article on this subject on the last MISC (lnkd.in/enrRVuBA) thank you Cyril Servieres
This Kube Goat could be a good candidate for next year.
May 17, 2024
May 17, 2024
Prabhsimran Singh ⚛️
Senior Security Engineer @ Finelabs | CRTO | OSCP | CRTP | eCPPT | Pentest+ | CEH Senior Security Engineer @ Finelabs | CRTO | OSCP | CRTP | eCPPT | Pentest+ | CEH
I wrote a blog post about installing Kubernetes Goat and solving the first two scenarios. The first scenario covers the risks of storing sensitive information in codebases, while the second scenario shows how attackers can exploit Docker-in-Docker configurations. Check out my blog post to learn more!
lnkd.in/dJYkES6Q
Prabhsimran Singh ⚛️
Senior Security Engineer @ Finelabs | CRTO | OSCP | CRTP | eCPPT | Pentest+ | CEH Senior Security Engineer @ Finelabs | CRTO | OSCP | CRTP | eCPPT | Pentest+ | CEH
I wrote a blog post about installing Kubernetes Goat and solving the first two scenarios. The first scenario covers the risks of storing sensitive information in codebases, while the second scenario shows how attackers can exploit Docker-in-Docker configurations. Check out my blog post to learn more!
lnkd.in/dJYkES6Q
Sep 3, 2023
Sep 3, 2023
Acadi-TI - Academia Inovadora de TI
22,504 followers 22,504 followers
🚀🔧 Série de Lives sobre Kubernetes - Attacking and Defending!🔧🚀
📅 Analisando camadas de container docker - Kubernets Goat
🗓️ 27/06
🕘 21h
🎙️ Thiago Muniz
Dando continuidade à nossa série de lives sobre Kubernetes - Attacking and Defending, Thiago Muniz vai abordar o tema “Analisando camadas de container docker” usando o projeto Kubernetes Goat.
Esta é uma oportunidade única para aprender técnicas avançadas de segurança em Kubernetes.
Não percam essa sessão prática e enriquecedora!
📢 lnkd.in/dcJNqSYi
\#KubernetesGoat #AttackingAndDefending #KubernetesSecurity
See translation
Acadi-TI - Academia Inovadora de TI
22,504 followers 22,504 followers
🚀🔧 Série de Lives sobre Kubernetes - Attacking and Defending!🔧🚀
📅 Analisando camadas de container docker - Kubernets Goat
🗓️ 27/06
🕘 21h
🎙️ Thiago Muniz
Dando continuidade à nossa série de lives sobre Kubernetes - Attacking and Defending, Thiago Muniz vai abordar o tema “Analisando camadas de container docker” usando o projeto Kubernetes Goat.
Esta é uma oportunidade única para aprender técnicas avançadas de segurança em Kubernetes.
Não percam essa sessão prática e enriquecedora!
📢 lnkd.in/dcJNqSYi
\#KubernetesGoat #AttackingAndDefending #KubernetesSecurity
See translation
Jun 27, 2024
Jun 27, 2024
Busra Kugler
Security Engineer Security Engineer
Happy Monday all 👋🏻
If you're interested in learning Kubernetes security and most common misconfigurations, go check out my last video on Kubernetes Security 101.
In this video I give a brief introduction on Kubernetes, what are the main components (node & pod, configmap & secret, deployment etc.), talk about a simplified K8s Architecture and diagram, proceed with local setup using Minikube, kubectl and much more.
Then we'll work on a playground called "Kubernetes Goat" which is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security. Kudos to Madhu Akula for this brilliant open-source playground. 🔥It's a great learning resource on Kubernetes misconfigurations.
Stay tuned for more Cloud/Kubernetes/Docker Security content.
Cheers!
Busra Kugler
Security Engineer Security Engineer
Happy Monday all 👋🏻
If you're interested in learning Kubernetes security and most common misconfigurations, go check out my last video on Kubernetes Security 101.
In this video I give a brief introduction on Kubernetes, what are the main components (node & pod, configmap & secret, deployment etc.), talk about a simplified K8s Architecture and diagram, proceed with local setup using Minikube, kubectl and much more.
Then we'll work on a playground called "Kubernetes Goat" which is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security. Kudos to Madhu Akula for this brilliant open-source playground. 🔥It's a great learning resource on Kubernetes misconfigurations.
Stay tuned for more Cloud/Kubernetes/Docker Security content.
Cheers!
Aug 14, 2023
Aug 14, 2023
Victoria S.
Security Engineer | Penetration tester | AWS Community Builder| eMAPT | eWPT | eJPT | AWS CP | CNSP | CAP | CCSP-AWS| CMPen(Android) | CNPen | C-AI/MLPen
🚢 Exploring Kubernetes Goat: Learn Kubernetes Security the Fun Way! 🐐🔐
If you're diving into Kubernetes and want to understand its security pitfalls hands-on, check out Kubernetes Goat- an intentionally vulnerable cluster developed by Madhu Akula
✅ Learn real-world Kubernetes security issues
✅ Practice attack & defense scenarios
✅ Great for red teamers, blue teamers, and DevSecOps
✅ Open-source and self-hosted (via Minikube or Kind)
🧠 My take: I recently tried it out, and it’s one of the most practical and efficient ways I’ve found to learn Kubernetes security. It let me explore several tools and techniques without wasting a lot of time or resources setting up everything from scratch. The real-world scenarios really helped connect the dots between theory and practice.
GitHub: [lnkd.in/ewfVs8PR]
Try it out, break it, and harden your Kubernetes skills. 💪🐳
And please, share analogues in comments if you know any.
#Kubernetes
#CloudNative
#DevSecOps
#KubernetesGoat
#Security
#CKS
#OpenSource
#CyberSecurity
Victoria S.
Security Engineer | Penetration tester | AWS Community Builder| eMAPT | eWPT | eJPT | AWS CP | CNSP | CAP | CCSP-AWS| CMPen(Android) | CNPen | C-AI/MLPen
🚢 Exploring Kubernetes Goat: Learn Kubernetes Security the Fun Way! 🐐🔐
If you're diving into Kubernetes and want to understand its security pitfalls hands-on, check out Kubernetes Goat- an intentionally vulnerable cluster developed by Madhu Akula
✅ Learn real-world Kubernetes security issues
✅ Practice attack & defense scenarios
✅ Great for red teamers, blue teamers, and DevSecOps
✅ Open-source and self-hosted (via Minikube or Kind)
🧠 My take: I recently tried it out, and it’s one of the most practical and efficient ways I’ve found to learn Kubernetes security. It let me explore several tools and techniques without wasting a lot of time or resources setting up everything from scratch. The real-world scenarios really helped connect the dots between theory and practice.
GitHub: [lnkd.in/ewfVs8PR]
Try it out, break it, and harden your Kubernetes skills. 💪🐳
And please, share analogues in comments if you know any.
#Kubernetes
#CloudNative
#DevSecOps
#KubernetesGoat
#Security
#CKS
#OpenSource
#CyberSecurity
Jul 30, 2025
Jul 30, 2025
Uptycs
10,649 followers 10,649 followers
💥 Today, we're announcing Unified Supply Chain and Runtime Security for Kubernetes. 📢
“With today’s product enhancements, #DevOps and #SecOps teams can enable fast and secure software development by aligning on risk-based policies, security controls, and detections across different container environments and workflows.” - Ganesh Pai
With our new automated code and runtime protections, your organization can align on policies, enforce them anywhere, and define remediation workflows — all from a single console.
#DevSecOps teams can now automate shift-left security controls using fine-grain image policies to detect #vulnerabilities, #malware, and misplaced secrets throughout the #SDLC.
Uptycs also added #Kubernetes Goat-based detections and incident response for critical Kubernetes security and misconfiguration scenarios, such as container escape and server-side request forgery (SSRF) exploitation.
Read the release here: lnkd.in/gZkSxVJN
#KubeConNA #KubeCon #KubeCon2023 #CNCF #KubernetesSecurity #K8s Cloud Native Computing Foundation (CNCF) #CloudNative #CloudNativeCon #Uptycs
Uptycs
10,649 followers 10,649 followers
💥 Today, we're announcing Unified Supply Chain and Runtime Security for Kubernetes. 📢
“With today’s product enhancements, #DevOps and #SecOps teams can enable fast and secure software development by aligning on risk-based policies, security controls, and detections across different container environments and workflows.” - Ganesh Pai
With our new automated code and runtime protections, your organization can align on policies, enforce them anywhere, and define remediation workflows — all from a single console.
#DevSecOps teams can now automate shift-left security controls using fine-grain image policies to detect #vulnerabilities, #malware, and misplaced secrets throughout the #SDLC.
Uptycs also added #Kubernetes Goat-based detections and incident response for critical Kubernetes security and misconfiguration scenarios, such as container escape and server-side request forgery (SSRF) exploitation.
Read the release here: lnkd.in/gZkSxVJN
#KubeConNA #KubeCon #KubeCon2023 #CNCF #KubernetesSecurity #K8s Cloud Native Computing Foundation (CNCF) #CloudNative #CloudNativeCon #Uptycs
Nov 7, 2023
Nov 7, 2023
Outshift by Cisco
55,963 followers 55,963 followers
How do you spot security vulnerabilities in a Cloud Native application? Great question!
Check out our latest blog where we explore vulnerabilities in Kubernetes Goat using Panoptica. cs.co/6044PQY7k #security #cloudnative #kubernetes
Outshift by Cisco
55,963 followers 55,963 followers
How do you spot security vulnerabilities in a Cloud Native application? Great question!
Check out our latest blog where we explore vulnerabilities in Kubernetes Goat using Panoptica. cs.co/6044PQY7k #security #cloudnative #kubernetes
Sep 5, 2023
Sep 5, 2023
Donald Lutz
Technical Architect Focused on Designing and Building Distributed Systems using Design Patterns and Enterprise Architecture deployed using Platform Engineering. Technical Architect Focused on Designing and Building Distributed Systems using Design Patterns and Enterprise Architecture deployed using Platform Engineering.
Kubernetes Goat: Attack & Defense Guide — Scenario 1: Sensitive Keys in Codebases #WorkSmartWithK8s #kubernetes #vulnerabilities #goatlab #pentest #scenario #devsecops
Donald Lutz
Technical Architect Focused on Designing and Building Distributed Systems using Design Patterns and Enterprise Architecture deployed using Platform Engineering. Technical Architect Focused on Designing and Building Distributed Systems using Design Patterns and Enterprise Architecture deployed using Platform Engineering.
Kubernetes Goat: Attack & Defense Guide — Scenario 1: Sensitive Keys in Codebases #WorkSmartWithK8s #kubernetes #vulnerabilities #goatlab #pentest #scenario #devsecops
Jul 1, 2024
Jul 1, 2024
Joe Colantonio
Test Automation with Industry Experts & Founder of Test Guild | DevOps | Software Testing | Join our 40K Community | Podcast Host & Speaker | Follow ➜ #TestGuild | Become a TestGuild Sponsor 👇 Test Automation with Industry Experts & Founder of Test Guild | DevOps | Software Testing | Join our 40K Community | Podcast Host & Speaker | Follow ➜ #TestGuild | Become a TestGuild Sponsor 👇
Just released the latest TestGuild newsletter featuring the biggest news item in #automationtesting #devops #performancetesting #sre and #securitytesting for the week of May 1st with:
Applitools #ux #ui
mabl #accessibility #testing
Marie Drake Cypress.io
Experitest (now Digital.ai) #AI #ML #insights
Marcus Merrell Sauce Labs
Deque Systems, Inc
Alexander Podelko #loadtesting #bencgmarking #workshops
Mark Lambert
Madhu Akula
Joe Colantonio
Test Automation with Industry Experts & Founder of Test Guild | DevOps | Software Testing | Join our 40K Community | Podcast Host & Speaker | Follow ➜ #TestGuild | Become a TestGuild Sponsor 👇 Test Automation with Industry Experts & Founder of Test Guild | DevOps | Software Testing | Join our 40K Community | Podcast Host & Speaker | Follow ➜ #TestGuild | Become a TestGuild Sponsor 👇
Just released the latest TestGuild newsletter featuring the biggest news item in #automationtesting #devops #performancetesting #sre and #securitytesting for the week of May 1st with:
Applitools #ux #ui
mabl #accessibility #testing
Marie Drake Cypress.io
Experitest (now Digital.ai) #AI #ML #insights
Marcus Merrell Sauce Labs
Deque Systems, Inc
Alexander Podelko #loadtesting #bencgmarking #workshops
Mark Lambert
Madhu Akula
May 3, 2022
May 3, 2022
Day Johnson
Security Engineer @ Amazon Security Engineer @ Amazon
K U B E R N E T E S.
A dreaded 10 letter word for me up until recently.
Well over here, we face our fears.
Join me as I set up a vulnerable Kubernetes environment using Kubernetes Goat by Madhu Akula.
This setup will be the beginning of many labs in a Kubernetes security series starting with an offensive approach and then eventually getting into the defensive (detection & response).
#kubernetes #kubernetessecurity #kubernetesmanagement #k8s #cloudnative #cloudsecurity
…more
Day Johnson
Security Engineer @ Amazon Security Engineer @ Amazon
K U B E R N E T E S.
A dreaded 10 letter word for me up until recently.
Well over here, we face our fears.
Join me as I set up a vulnerable Kubernetes environment using Kubernetes Goat by Madhu Akula.
This setup will be the beginning of many labs in a Kubernetes security series starting with an offensive approach and then eventually getting into the defensive (detection & response).
#kubernetes #kubernetessecurity #kubernetesmanagement #k8s #cloudnative #cloudsecurity
…more
Dec 4, 2023
Dec 4, 2023
Binni Shah
@binitamshah
Kubernetes Goat : It has intentionally vulnerable by design scenarios to showcase the common misconfigurations, real-world vulnerabilities, and security issues in Kubernetes clusters, containers, and cloud native environments : madhuakula.com/kubernetes-goat credits @madhuakula
Binni Shah
@binitamshah
Kubernetes Goat : It has intentionally vulnerable by design scenarios to showcase the common misconfigurations, real-world vulnerabilities, and security issues in Kubernetes clusters, containers, and cloud native environments : madhuakula.com/kubernetes-goat credits @madhuakula
Jul 30, 2024
Jul 30, 2024
👾 S.
Director IT-Security at flatexDEGIRO Director IT-Security at flatexDEGIRO
Thanks Vincent van Houten and Ilona D. for giving this nice container and Kubernetes workshop from Secura
I will go further with this Kubernetes Goat you tipped at home 😬
👾 S.
Director IT-Security at flatexDEGIRO Director IT-Security at flatexDEGIRO
Thanks Vincent van Houten and Ilona D. for giving this nice container and Kubernetes workshop from Secura
I will go further with this Kubernetes Goat you tipped at home 😬
Jul 4, 2024
Jul 4, 2024
LN
Lawrence Neo
Security Director at Telenor Asia Pte Ltd | Expertise in NIST Cybersecurity Framework & ISMS Subject Matter Expert | Critical Information Infrastructure (CII) Regulatory Compliance | CISSP & CISA | M&A & PMI Security Director at Telenor Asia Pte Ltd | Expertise in NIST Cybersecurity Framework & ISMS Subject Matter Expert | Critical Information Infrastructure (CII) Regulatory Compliance | CISSP & CISA | M&A & PMI
🚀 Ready to level up your Kubernetes Pentesting skills? 🐐🌟
Setting up your own Kubernetes Goat Pentesting Lab can be an
invaluable way to master how to pentest this powerful orchestration tool! 🎯🔍
🔧 Step 1: Get Your Tools Ready
First things first, ensure you have the necessary resources: a cloud provider
(like AWS, GCP, or Azure), a decently specced machine (Virtual Machine on VMWare or Virtualbox), and a reliable internet connection.
📚 Step 2: Gather Learning Materials
Compile tutorials, guides, and resources from the vast wealth available online. Platforms like Kubernetes documentation, KubeAcademy, and CNCF resources are goldmines.
🏗️ Step 3: Set Up Your Cluster
Utilize tools like kubectl, minikube, or managed services from your cloud provider to deploy a Kubernetes cluster. Ensure security measures are in place.
🐐 Step 4: Deploy Kubernetes Goat
Kubernetes Goat is an intentionally vulnerable Kubernetes cluster environment with multiple scenarios that can be used to learn and practice Kubernetes security. Follow this link on how to deploy Kubernetes Goat lnkd.in/daWdjj6z in your cluster.
🧪 Step 5: Experiment & Learn
Kubernetes goat has more than 20 scenarios covering attack, defense, etc. Learn how to harden Kubernetes by solving these scenarios. Embrace trial and error—it's the best teacher!
🌐 Step 6: Network & Collaborate
Engage with the Kubernetes community, join forums, attend meetups, and collaborate on projects. Learning is amplified when shared.
🚀 Step 7: Iterate & Innovate
Continue refining your skills, exploring advanced concepts, and pushing the boundaries of what you can achieve with Kubernetes.
Remember, learning Kubernetes is an ongoing journey. Embrace
challenges, celebrate victories, and never stop exploring.
🌟💻 Let's empower ourselves and each other in this amazing tech
space! 🚀✨
What are your top tips for mastering Kubernetes security? Share
your thoughts in the comments below! Let's learn together. 👇💬
Kubernetes
LN
Lawrence Neo
Security Director at Telenor Asia Pte Ltd | Expertise in NIST Cybersecurity Framework & ISMS Subject Matter Expert | Critical Information Infrastructure (CII) Regulatory Compliance | CISSP & CISA | M&A & PMI Security Director at Telenor Asia Pte Ltd | Expertise in NIST Cybersecurity Framework & ISMS Subject Matter Expert | Critical Information Infrastructure (CII) Regulatory Compliance | CISSP & CISA | M&A & PMI
🚀 Ready to level up your Kubernetes Pentesting skills? 🐐🌟
Setting up your own Kubernetes Goat Pentesting Lab can be an
invaluable way to master how to pentest this powerful orchestration tool! 🎯🔍
🔧 Step 1: Get Your Tools Ready
First things first, ensure you have the necessary resources: a cloud provider
(like AWS, GCP, or Azure), a decently specced machine (Virtual Machine on VMWare or Virtualbox), and a reliable internet connection.
📚 Step 2: Gather Learning Materials
Compile tutorials, guides, and resources from the vast wealth available online. Platforms like Kubernetes documentation, KubeAcademy, and CNCF resources are goldmines.
🏗️ Step 3: Set Up Your Cluster
Utilize tools like kubectl, minikube, or managed services from your cloud provider to deploy a Kubernetes cluster. Ensure security measures are in place.
🐐 Step 4: Deploy Kubernetes Goat
Kubernetes Goat is an intentionally vulnerable Kubernetes cluster environment with multiple scenarios that can be used to learn and practice Kubernetes security. Follow this link on how to deploy Kubernetes Goat lnkd.in/daWdjj6z in your cluster.
🧪 Step 5: Experiment & Learn
Kubernetes goat has more than 20 scenarios covering attack, defense, etc. Learn how to harden Kubernetes by solving these scenarios. Embrace trial and error—it's the best teacher!
🌐 Step 6: Network & Collaborate
Engage with the Kubernetes community, join forums, attend meetups, and collaborate on projects. Learning is amplified when shared.
🚀 Step 7: Iterate & Innovate
Continue refining your skills, exploring advanced concepts, and pushing the boundaries of what you can achieve with Kubernetes.
Remember, learning Kubernetes is an ongoing journey. Embrace
challenges, celebrate victories, and never stop exploring.
🌟💻 Let's empower ourselves and each other in this amazing tech
space! 🚀✨
What are your top tips for mastering Kubernetes security? Share
your thoughts in the comments below! Let's learn together. 👇💬
Kubernetes
Dec 14, 2023
Dec 14, 2023
Christophe Limpalair
Founder at Cybr | AWS Security Training ☁️ Founder at Cybr | AWS Security Training ☁️
Join us for a free hands-on demo of attacking and defending Amazon EKS (and Kubernetes in general) using Kubernetes Goat.
🐐 Kubernetes Goat is an open source and interactive #Kubernetes security learning playground. It has intentionally vulnerable scenarios to showcase common misconfigurations, real-world vulnerabilities, and security issues in Kubernetes clusters, #containers, and cloud native environments.
Georgi Vodenitcharov, CISSP will walk us through:
📌 How to use Kubernetes Goat
📌 An example exploit 💥
📌 How to defend EKS
We'll start off by providing an overview of installing and setting up Kubernetes Goat. Then Georgi will walk us through one of the exploits, before we move on to discussing defenses. We'll explore both free tools and #AWS native defenses.
Date/Time
🗓️ Tuesday January 23rd, 2023
⏰ 02:00 PM PST / 03:00 PM MST / 5:00 PM EST
✅ Register your spot and mark your calendars: lnkd.in/giBvD8tz
#containersecurity #awscloud
Christophe Limpalair
Founder at Cybr | AWS Security Training ☁️ Founder at Cybr | AWS Security Training ☁️
Join us for a free hands-on demo of attacking and defending Amazon EKS (and Kubernetes in general) using Kubernetes Goat.
🐐 Kubernetes Goat is an open source and interactive #Kubernetes security learning playground. It has intentionally vulnerable scenarios to showcase common misconfigurations, real-world vulnerabilities, and security issues in Kubernetes clusters, #containers, and cloud native environments.
Georgi Vodenitcharov, CISSP will walk us through:
📌 How to use Kubernetes Goat
📌 An example exploit 💥
📌 How to defend EKS
We'll start off by providing an overview of installing and setting up Kubernetes Goat. Then Georgi will walk us through one of the exploits, before we move on to discussing defenses. We'll explore both free tools and #AWS native defenses.
Date/Time
🗓️ Tuesday January 23rd, 2023
⏰ 02:00 PM PST / 03:00 PM MST / 5:00 PM EST
✅ Register your spot and mark your calendars: lnkd.in/giBvD8tz
#containersecurity #awscloud
Jan 18, 2024
Jan 18, 2024
Tom Dörr
@tom_doerr
"Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground"
Tom Dörr
@tom_doerr
"Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground"
Nov 18, 2024
Nov 18, 2024
Georgi Vodenitcharov, CISSP, CCISO Associate
Consulting Security Engineering Specialist | CISSP | CCISO Associate | AWS Certified x7 | Zscaler ZTCA Consulting Security Engineering Specialist | CISSP | CCISO Associate | AWS Certified x7 | Zscaler ZTCA
Check out this awesome Kubernetes security cheat sheet by Christophe Limpalair based on the talk we did together on #Kubernetes Goat hosted by Cybr.
#devsecops #kubernetes
Georgi Vodenitcharov, CISSP, CCISO Associate
Consulting Security Engineering Specialist | CISSP | CCISO Associate | AWS Certified x7 | Zscaler ZTCA Consulting Security Engineering Specialist | CISSP | CCISO Associate | AWS Certified x7 | Zscaler ZTCA
Check out this awesome Kubernetes security cheat sheet by Christophe Limpalair based on the talk we did together on #Kubernetes Goat hosted by Cybr.
#devsecops #kubernetes
Jan 31, 2024
Jan 31, 2024
Tom Dörr
@tom_doerr
Kubernetes security learning cluster
github.com/madhuakula/kubernetes-goat
Tom Dörr
@tom_doerr
Kubernetes security learning cluster
github.com/madhuakula/kubernetes-goat
Apr 1, 2026
Apr 1, 2026
solst/ICE
@IceSolst
Best resource for k8s attacks and hardening is KubernetesGoat by @madhuakula which shows a few container escape methods (examples in thread)
madhuakula.com/kubernetes-goat
solst/ICE
@IceSolst
Best resource for k8s attacks and hardening is KubernetesGoat by @madhuakula which shows a few container escape methods (examples in thread)
madhuakula.com/kubernetes-goat
Nov 19, 2024
Nov 19, 2024
Nusret Önen
CTO at Gardiyan IT Auditor (27001LA, CISA, GDPR) - Agile Coach/Project Manager (PMI-PMP, PMI-ACP, CSP) - Open Source Enthusiast (LFC/LFD/OSS) - Cloud & DevOps Architect (CKA, CKS, AWS)
🐐☣️ Kubernetes Güvenliği Öğrenmenin En Eğlenceli Hali: Kubernetes Goat!
Modern altyapıların bel kemiği olan Kubernetes’i kullanmak kolay, ama güvenliğini sağlamak ayrı bir uzmanlık gerektiriyor.
İşte tam bu noktada Kubernetes Goat devreye giriyor:
🎯 Amaç: Bilinçli saldırılarla Kubernetes ortamlarında güvenlik açıklarını göstermek, öğretmek ve savunmayı geliştirmek.
📌 Nedir Kubernetes Goat?
🧠 Kubernetes Goat, “intentional vulnerable-by-design” bir eğitim platformudur.
Yani bilerek zafiyetli hale getirilmiş bir Kubernetes ortamında gerçek saldırı senaryoları üzerinde çalışarak güvenlik farkındalığı kazanırsınız.
🛡️ Neden Kullanmalısınız?
✅ Gerçek dünya senaryolarıyla pratik yapma şansı
🔓 En sık karşılaşılan K8s güvenlik zafiyetlerinin demonstrasyonu
🧠 Sızma testi ve Red Team çalışmaları için birebir
📈 Blue Team için güvenlik iyileştirme egzersizlerine olanak sağlar
🌐 Cloud-native ortamlar için çevik güvenlik eğitimi
🚨 Kapsamlı Zafiyet Senaryoları
🛑 Misconfigured RBAC
🐚 Privilege Escalation
🪜 Container Escape
🧬 K8s Secrets Exposure
🕵️♀️ SSRF, Pod Snooping
🧼 Insecure Dockerfile örnekleri
💉 DoS, API Abuse, Port Forwarding zafiyetleri
🔐 Kubelet Exploitation ve daha fazlası…
🧪 Örnek Kullanım Senaryosu
Bir DevSecOps ekibi, Kubernetes ortamına geçmeden önce ekibin farkındalığını artırmak istiyor.
Tüm ekip üyeleri Kubernetes Goat üzerinde saldırı vektörlerini test ederek, kendi sistemlerinde benzer açıkların nasıl önleneceğini öğreniyor.
Sonuç: daha güçlü bir güvenlik kültürü ve zafiyetlere karşı hazırlıklı bir ekip.
👥 Kimler Kullanmalı?
🔐 Red Team ve Blue Team ekipleri
🧑💻 DevSecOps mühendisleri
🎓 Güvenlik farkındalığı eğitimi veren akademisyenler
☁️ Cloud-native mimariyle çalışan kurumlar
🧰 CI/CD süreçlerine K8s güvenliği entegre etmek isteyen yazılım ekipleri
🔗 GitHub:
👉 lnkd.in/d8K6724D
🙏Thanks: Madhu Akula
#KubernetesGoat
#KubernetesSecurity
#CloudNative
#RedTeam
#BlueTeam
#DevSecOps
#ContainerSecurity
#OpenSourceSecurity
#KubernetesTraining
#SecurityAwareness
Nusret Önen
CTO at Gardiyan IT Auditor (27001LA, CISA, GDPR) - Agile Coach/Project Manager (PMI-PMP, PMI-ACP, CSP) - Open Source Enthusiast (LFC/LFD/OSS) - Cloud & DevOps Architect (CKA, CKS, AWS)
🐐☣️ Kubernetes Güvenliği Öğrenmenin En Eğlenceli Hali: Kubernetes Goat!
Modern altyapıların bel kemiği olan Kubernetes’i kullanmak kolay, ama güvenliğini sağlamak ayrı bir uzmanlık gerektiriyor.
İşte tam bu noktada Kubernetes Goat devreye giriyor:
🎯 Amaç: Bilinçli saldırılarla Kubernetes ortamlarında güvenlik açıklarını göstermek, öğretmek ve savunmayı geliştirmek.
📌 Nedir Kubernetes Goat?
🧠 Kubernetes Goat, “intentional vulnerable-by-design” bir eğitim platformudur.
Yani bilerek zafiyetli hale getirilmiş bir Kubernetes ortamında gerçek saldırı senaryoları üzerinde çalışarak güvenlik farkındalığı kazanırsınız.
🛡️ Neden Kullanmalısınız?
✅ Gerçek dünya senaryolarıyla pratik yapma şansı
🔓 En sık karşılaşılan K8s güvenlik zafiyetlerinin demonstrasyonu
🧠 Sızma testi ve Red Team çalışmaları için birebir
📈 Blue Team için güvenlik iyileştirme egzersizlerine olanak sağlar
🌐 Cloud-native ortamlar için çevik güvenlik eğitimi
🚨 Kapsamlı Zafiyet Senaryoları
🛑 Misconfigured RBAC
🐚 Privilege Escalation
🪜 Container Escape
🧬 K8s Secrets Exposure
🕵️♀️ SSRF, Pod Snooping
🧼 Insecure Dockerfile örnekleri
💉 DoS, API Abuse, Port Forwarding zafiyetleri
🔐 Kubelet Exploitation ve daha fazlası…
🧪 Örnek Kullanım Senaryosu
Bir DevSecOps ekibi, Kubernetes ortamına geçmeden önce ekibin farkındalığını artırmak istiyor.
Tüm ekip üyeleri Kubernetes Goat üzerinde saldırı vektörlerini test ederek, kendi sistemlerinde benzer açıkların nasıl önleneceğini öğreniyor.
Sonuç: daha güçlü bir güvenlik kültürü ve zafiyetlere karşı hazırlıklı bir ekip.
👥 Kimler Kullanmalı?
🔐 Red Team ve Blue Team ekipleri
🧑💻 DevSecOps mühendisleri
🎓 Güvenlik farkındalığı eğitimi veren akademisyenler
☁️ Cloud-native mimariyle çalışan kurumlar
🧰 CI/CD süreçlerine K8s güvenliği entegre etmek isteyen yazılım ekipleri
🔗 GitHub:
👉 lnkd.in/d8K6724D
🙏Thanks: Madhu Akula
#KubernetesGoat
#KubernetesSecurity
#CloudNative
#RedTeam
#BlueTeam
#DevSecOps
#ContainerSecurity
#OpenSourceSecurity
#KubernetesTraining
#SecurityAwareness
Aug 1, 2025
Aug 1, 2025