Welcome
Introduction
1. Disclaimer
2. Agenda
Environment Setup
Getting started with docker
Docker Advanced Concepts
Attacking Insecure Volume Mounts
1. Scenario
2. Solution
Learning More
Attacking docker misconfiguration
1. Scenario
2. Solution
Auditing Docker containers and images
Auditing Docker networks and volumes
Docker integrity checks
amicontained
Attacking & Auditing Docker Runtime & Registries
1. Docker runtime endpoints
2. Docker registries
Attacking container capabilities
1. Scenario
2. Solution
Linux Security Module: Apparmor
Attacking swarm cluster secrets
1. Scenario
2. Solution
Attacking private registry images
1. Scenario
2. Solution
Docker Bench security audit
Container Security Monitoring
Kubernetes Environment Setup
Getting Started with Kubernetes
Deploying simple application in Kubernetes Cluster
1. Using yaml manifest
2. Using helm chart
Scenario-1 - Exploiting Private Registry via Misconfiguration
Scenario-2 - Attacking Kubernetes Cluster Metadata using SSRF vulnerability
Scenario-3 - Testing for the sensitive configurations and secrets in Kubernetes cluster
Scenario-4 - Docker escape using Pod Volume Mounts to access the nodes and host systems
Scenario-5 - Attacking applications in different namespaces in Kubernetes cluster
Scenario-6 - Attacking Helm tiller without RBAC setup
Running kube-bench
Running kubesec
Running kube-hunter
Running kubeaudit
Logging and Monitoring
Automated Security Defense using Sysdig Falco
DEMO's
Fun Learning About Kubernetes
Popular Attacks
References & Resources
Terminology Glossary
License

Attacking and Auditing Docker Containers and Kubernetes Clusters

Common Troubleshooting Steps

If you encounter REMOTE HOST IDENTIFICATION CHANGED error. Please remove the conflicting entry by running the command printed

ssh host key error