Owasp-top-10-k8s-2025

OWASP Kubernetes Top 10 2025, 실습 캡처 더 플래그 프로젝트로, OWASP Kubernetes Top 10 — 2025를 기반으로 구성되었습니다. 당신은 가상의 전자상거래 회사 NimbusMart 의 레드팀으로 고용되었습니다. 이 회사의 클러스터는 보안보다 빠르게 성장했습니다. 10개의 도전 과제는 각 OWASP 위험 요소당 하나씩 보너스 포함 제공됩니다. 각 취약점을 악용하여 깃발을 획득 한 다음, 수정 사항을 적용하고 체커로 입증하세요. 전체 배경 이야기회사, 서비스, 네임스페이스, 깃발 체계는...

edu-recon

edu-recon 教育セクターのレッド/ブルー演習 向けの、認可された偵察＆トリアージオーケストレーター。 ターゲットを投入すると、スキャナーを実行し、ノイズをフィルタリングし、ランク付けされた レビューキューを Web UI で提供します。Linux マシン（Kali / インフラ）にデプロイし、 ブラウザから操作することを想定して構築されています。 ⚠️ 認可された使用のみ。 テストを許可されているシステムにのみ向けてください。 スコープロックはデフォルトでオフ です — 認可の責任はオペレーターにあります。実際の エンゲージメントでは、config.yaml の...

How to ‘Win’ a Red Team Exercise

What is a red team exercise? Organizations that conduct red team exercises use penetration testing tactics to assess vulnerabilities and discover weak points in their cybersecurity preparation. Usually, this involves two teams - one red the protagonists and one blue the incident responders who mu...

What Are Red Team Exercises and Why Are They Important?

Pick a side. It’s game time, and nothing is off the table. -- For most organizations, a true defense-in-depth strategy includes the proactive testing of company cyber defenses. A Red Team Exercise is designed to reveal vulnerabilities in a companys security through hands-on testing, uncovering...

Red Team — Automation or Simulation?

What is the difference between a penetration test and a red team exercise? The common understanding is that a red team exercise is a pen-test on steroids, but what does that mean? While both programs are performed by ethical hackers, whether they are in-house residents or contracted externally, t...

Red Team — Automation or Simulation?

What is the difference between a penetration test and a red team exercise? The common understanding is that a red team exercise is a pen-test on steroids, but what does that mean? While both programs are performed by ethical hackers, whether they are in-house residents or contracted externally, t...

SpiderFoot 2.12 - Automates OSINT to find out everything possible about your target

SpiderFoot is a reconnaissance tool that automatically queries over 100 public data sources OSINT to gather intelligence on IP addresses, domain names, e-mail addresses, names and more. You simply specify the target you want to investigate, pick which modules to enable and then SpiderFoot will...