abdennebi-forks Goto Github PK

electriceye

Continuously monitor your AWS services for configurations that can lead to degradation of confidentiality, integrity or availability. All results will be sent to Security Hub for further aggregation and analysis.

emblem

:diamond_shape_with_a_dot_inside:Emblem Giving is a sample application that demonstrates a serverless architecture with continuous delivery, and trouble recovery. Project Status: :construction: ALPHA 

end-to-end-workshop

endgame

An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

envoy_iap

Envoy proxy JWT validator for Google Identity Aware proxy and Google ID Tokens

fast-kubernetes

This repo covers Kubernetes Environment with LABs: Kubectl, Pod, Deployment, Service, PV, PVC, Kubeadm, Helm, etc.

gardener

Kubernetes-native system managing the full lifecycle of conformant Kubernetes clusters as a service on Alicloud, AWS, Azure, GCP, OpenStack, Packet, vSphere, MetalStack, and Kubevirt with minimal TCO.

gatekeeper-securitycenter

Report Policy Controller and OPA Gatekeeper audit violations in Security Command Center.

gcp-fedramp-quickstart

gcp-gcping

The source for the CLI and web app at gcping.com

gcp-iam-privilege-escalation

A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.

gcp_error_handler

Decoding GCP Errors Details

gcp_iam_update_bot

Tweets when new GCP IAM updates are found

gcp_impersonated_credentials

Using ImpersonatedCredentials for Google Cloud API and id_tokens

gcpbucketbrute

A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.

gcpcompat-saml

Exchange SAML Credentials for GCP Credentials using GCP STS Service

gcpgoat

GCPGoat : A Damn Vulnerable GCP Infrastructure

gcploit

These are tools we released with our 2020 defcon/blackhat talk https://www.youtube.com/watch?v=Ml09R38jpok

gcptree

Like the unix tree command but for GCP Org Heirarchy

gdpr-developer-guide

The CNIL publishes a GDPR guide for developers

github-dorks

Find leaked secrets via github search

gke-cloud-sql-postgres-demo

This project shows how easy it is to connect an application in Kubernetes Engine to a Cloud SQL instance, using the Cloud SQL Proxy container as a sidecar container. You will deploy a Kubernetes Engine Cluster and a Cloud SQL Postgres instance, and use the Cloud SQL Proxy container to allow communication between them.

gke-datadog-demo

This project demonstrates how a third party solution, like Datadog, can be used to monitor a Kubernetes Engine cluster and its workloads. Using the provided manifest, you will install Datadog and a simple nginx workload into your cluster. The Datadog agents will be configured to monitor the nginx workload, and ship metrics to your own Datadog account.

gke-enterprise-demo

This demo aims to show what a fully-featured project running in Kubernetes Engine looks like. It includes Elasticsearch, a very popular open-source project for indexing and searching data, as well as some custom software to interface with it.

gke-istio-vpn-demo

This project demonstrates how Istio's mesh expansion feature can be used to link services accross a VPN. The feature allows for a non-Kubernetes service running outside of the Istio infrastructure on Kubernetes Engine, to be integrated into, and managed by the Istio service mesh.

gke-logging-sinks-demo

This project describes the steps required to deploy a sample application to Kubernetes Engine that forwards log events to Stackdriver Logging. As a part of the exercise, you will create a Cloud Storage bucket and a BigQuery dataset for exporting log data.

gke-managed-certs

Managed Certificates for Kubernetes clusters using GCLB

gke-network-policy-demo

This guide demonstrates how to improve the security of your Kubernetes Engine by applying fine-grained restrictions to network communication. You will provision a simple HTTP server and two client pods in a Kubernetes Engine cluster, then use a Network Policy restrict connections from client pods.

gke-networking-recipes

gke-rbac-demo

This project covers two use cases for RBAC within a Kubernetes Engine cluster. First, assigning different permissions to user personas. Second, granting limited API access to an application running within your cluster. Since RBAC's flexibility can occasionally result in complex rules, you will also perform common steps for troubleshooting RBAC as a part of the second scenario.