List: devops | Curated by Arnav Tripathy

Dec 22, 2022

88 stories

2 saves

devops
Mohamed reda
How I was able to steal users credentials via Swagger UI DOM-XSSHello guys, today I’m gonna explain how i got DOM-XSS from Swagger-UI and exploit it to make HTML and JAVASCRIPT injections to create a…
Dec 18, 2022
10
Dec 18, 2022
10
 This story is no longer available
SOCFortress
Build Your Own SIEM Stack with Open Source Tools SeriesIntro to our Worlds Best SOC Built on Open Source Tools series.
Oct 1, 2022
5
Oct 1, 2022
5
Udesh Udayakumar
Pass Certified Kubernetes Security Specialist (CKS) in 30 days (2023)Hello there! I hope you’re doing well. I wanted to tell you about my story behind getting certified as a Certified Kubernetes Security…
Sep 19, 2022
Sep 19, 2022
 This story is no longer available
In
Coding Wizards
by
Burak Bozacı
OSI Model For Cyber SecurityTo be able to attack and defend effectively, we need to have deeply understanding osı model. Open Systems Interconnection model (OSI…
Jun 27, 2022
Jun 27, 2022
0xffccdd
SOC2 Compliance in AWSSOC 2 compliance is a set of standards that organizations use to ensure the security, confidentiality, and integrity of their systems and…
Feb 24, 2022
Feb 24, 2022
Shakhawat Hossain - 0xShakhawat
Top 5 Security Issue with COOKIESWhat are Cookies? Five Security Issue with cookies: CSRF, Session Fixation, XXS, Tossing attack, cookie capture | Explained
Aug 7, 2022
1
Aug 7, 2022
1
In
InfoSec Write-ups
by
Yani
Kubernetes SecurityThis blog post covers the security features in Kubernetes and best practices from a security point of view.
Aug 8, 2022
Aug 8, 2022
In
AWS Tip
by
Valentin Marlier
101 — How to use Terraform to deploy Managed Kubernetes cluster(s)Implementing RPA, creating CI/CD pipelines, even automating processes through CRMs are now things where companies accept to spend some…
Jul 26, 2022
2
Jul 26, 2022
2
Nandita Sahu
Terraform with GCP CloudHere, in this article we are going to create basic networking architecture of GCP like VPC, Subnets, Firewalls, Routes, IAP Tunnel…
Jul 24, 2022
2
Jul 24, 2022
2
In
InfoSec Write-ups
by
Taimur Ijlal
How to start Penetration testing of Artificial IntelligencePentesting needs to evolve to find AI based risks
Jul 2, 2022
1
Jul 2, 2022
1
In
FAUN — Developer Community 🐾
by
Federico Carbonetti
From dev to admin: an easy Kubernetes privilege escalation you should be aware of — the attackSecuring a k8s cluster goes beyond implementing Auth: in this post we’ll see how easily a limited user (dev) can steal admin credentials!
Mar 9, 2022
Mar 9, 2022
Beatriz Martínez Rubio
Network security for microservices with eBPFSeveral open-source Kubernetes tools are already using eBPF. Mainly related to networking, monitoring, and security.
The intention of this…
Apr 15, 2019
2
Apr 15, 2019
2
In
Craftech
by
Ariel Viñas
One chart to rule them allHow to implement Helm subcharts
Jan 3, 2021
4
Jan 3, 2021
4
In
Velotio Perspectives
by
Velotio Technologies
Know Everything About Spinnaker & How to Deploy Using Kubernetes EngineIntroduction
Jan 2, 2019
5
Jan 2, 2019
5
0xffccdd
AWS IAM Security Best Practices & ChecklistIf you are using Amazon Web Services (AWS), it is important to understand the concept of AWS Identity and Access Management (IAM). IAM is a…
Jun 21, 2022
1
Jun 21, 2022
1
In
DevOps.dev
by
Kayode Adeniyi
DevOps Security Checklist for Kubernetes DeploymentWith the advancement in technology stacks, automated deployment techniques, and associated development, the need for security is also…
Jul 2, 2022
1
Jul 2, 2022
1
Enterprise DevOps
Best DevSecOps Tools for 2022 | Open Source EnterpriseWhat is DevSecOps?
Jun 29, 2022
2
Jun 29, 2022
2
Ran Rubin
A robust implementation of ArgoCD’s App Of Apps PatternImplementation for ArgoCD’s App of Apps pattern and a few tips that helped me use it in a in a convenient, extensible, and stable manner
May 11, 2022
2
May 11, 2022
2

devops

How I was able to steal users credentials via Swagger UI DOM-XSS

Hello guys, today I’m gonna explain how i got DOM-XSS from Swagger-UI and exploit it to make HTML and JAVASCRIPT injections to create a…

Build Your Own SIEM Stack with Open Source Tools Series

Intro to our Worlds Best SOC Built on Open Source Tools series.

Pass Certified Kubernetes Security Specialist (CKS) in 30 days (2023)

Hello there! I hope you’re doing well. I wanted to tell you about my story behind getting certified as a Certified Kubernetes Security…

OSI Model For Cyber Security

To be able to attack and defend effectively, we need to have deeply understanding osı model. Open Systems Interconnection model (OSI…

SOC2 Compliance in AWS

SOC 2 compliance is a set of standards that organizations use to ensure the security, confidentiality, and integrity of their systems and…

Top 5 Security Issue with COOKIES

What are Cookies? Five Security Issue with cookies: CSRF, Session Fixation, XXS, Tossing attack, cookie capture | Explained

Kubernetes Security

This blog post covers the security features in Kubernetes and best practices from a security point of view.

101 — How to use Terraform to deploy Managed Kubernetes cluster(s)

Implementing RPA, creating CI/CD pipelines, even automating processes through CRMs are now things where companies accept to spend some…

Terraform with GCP Cloud

Here, in this article we are going to create basic networking architecture of GCP like VPC, Subnets, Firewalls, Routes, IAP Tunnel…

How to start Penetration testing of Artificial Intelligence

Pentesting needs to evolve to find AI based risks

From dev to admin: an easy Kubernetes privilege escalation you should be aware of — the attack

Securing a k8s cluster goes beyond implementing Auth: in this post we’ll see how easily a limited user (dev) can steal admin credentials!

Network security for microservices with eBPF

Several open-source Kubernetes tools are already using eBPF. Mainly related to networking, monitoring, and security. The intention of this…

One chart to rule them all

How to implement Helm subcharts

Know Everything About Spinnaker & How to Deploy Using Kubernetes Engine

Introduction

AWS IAM Security Best Practices & Checklist

If you are using Amazon Web Services (AWS), it is important to understand the concept of AWS Identity and Access Management (IAM). IAM is a…

DevOps Security Checklist for Kubernetes Deployment

With the advancement in technology stacks, automated deployment techniques, and associated development, the need for security is also…

Best DevSecOps Tools for 2022 | Open Source Enterprise

What is DevSecOps?

A robust implementation of ArgoCD’s App Of Apps Pattern

Implementation for ArgoCD’s App of Apps pattern and a few tips that helped me use it in a in a convenient, extensible, and stable manner

Arnav Tripathy