sec-pentesting-toolkit/Cloud_and_K8s_Hacking

Cloud and K8s Hacking

CI/CD pipelines

• Static code security analyzers: SonarQube (Javascript scanner), NodeJsScan.
• Package dependency security analyzers: Snyk.
• Docker image security analyzers: Hadolint, Clair, Anchore.
• AWS IAM permission analyzers: IAM access advisor APIs.
• PMapper.
• AWS S3 permission analyzers: s3audit.
• Docker runtime anomaly detection: Falco.
• Kubernetes policy security analyzers: RBAC.
• Policy auditing tools: Rakkess.