Owasp-top-10-k8s-2025

OWASP Kubernetes Top 10 2025 动手实践 基于 OWASP Kubernetes Top 10 — 2025 搭建的 夺旗赛（capture-the-flag） 。 你被聘为红队成员，攻击 NimbusMart （一家虚构的电商公司），其集群增长速度快于安全建设。十个挑战对应十个 OWASP 风险（外加一个额外关卡）—— 利用每个弱点，夺旗 ，然后应用修复并用检查器验证。 世界设定（公司、服务、命名空间、旗帜方案）详见 labs/NIMBUSMART.md。 一切在本地 kind 上运行。切勿在真实集群上运行这些脆弱清单。 由 @hac01 构建。 涵盖内容...

edu-recon

edu-recon Orquestador autorizado de reconocimiento y triaje para ejercicios red/blue del sector educativo. Introduce los objetivos, ejecuta los escáneres, filtra el ruido y te entrega una cola de revisión clasificada en una interfaz web. Diseñado para desplegarse en tu máquina Linux Kali / infra,...

How to ‘Win’ a Red Team Exercise

What is a red team exercise? Organizations that conduct red team exercises use penetration testing tactics to assess vulnerabilities and discover weak points in their cybersecurity preparation. Usually, this involves two teams - one red the protagonists and one blue the incident responders who mu...

What Are Red Team Exercises and Why Are They Important?

Pick a side. It’s game time, and nothing is off the table. -- For most organizations, a true defense-in-depth strategy includes the proactive testing of company cyber defenses. A Red Team Exercise is designed to reveal vulnerabilities in a companys security through hands-on testing, uncovering...

Red Team — Automation or Simulation?

What is the difference between a penetration test and a red team exercise? The common understanding is that a red team exercise is a pen-test on steroids, but what does that mean? While both programs are performed by ethical hackers, whether they are in-house residents or contracted externally, t...

Red Team — Automation or Simulation?

What is the difference between a penetration test and a red team exercise? The common understanding is that a red team exercise is a pen-test on steroids, but what does that mean? While both programs are performed by ethical hackers, whether they are in-house residents or contracted externally, t...

SpiderFoot 2.12 - Automates OSINT to find out everything possible about your target

SpiderFoot is a reconnaissance tool that automatically queries over 100 public data sources OSINT to gather intelligence on IP addresses, domain names, e-mail addresses, names and more. You simply specify the target you want to investigate, pick which modules to enable and then SpiderFoot will...