Containers

• https://research.nccgroup.com/2020/02/12/command-and-kubectl-talk-follow-up/

• https://github.com/aquasecurity/kube-bench

• https://github.com/ekeih/kube-shodan

• https://tldrsec.com/blog/tldr-sec-022-appsec-cali-kubernetes-monitoring/

• https://github.com/aquasecurity/kube-bench

• https://cloudsecwiki.com/kubernetes.html

• https://speakerdeck.com/iancoldwater/the-path-less-traveled-abusing-kubernetes-defaults

• https://twitter.com/bradgeesaman/status/1186245658015141888

• http://carnal0wnage.attackresearch.com/2019/01/kubernetes-master-post.html

• https://www.youtube.com/watch?v=fZJ-5rAwcp0

• https://raesene.github.io/blog/2019/08/10/making-it-rain-shells-in-Kubernetes/

• https://www.cyberark.com/threat-research-blog/kubernetes-pentest-methodology-part-1/

• https://hakin9.org/a-kubernetes-quick-start-for-people-who-know-just-enough-about-docker/

• https://research.nccgroup.com/2020/02/12/command-and-kubectl-talk-follow-up/

• https://github.com/kubernetes/community/blob/f60981a189ea3a26747524df3a9d16cf9f69afdd/wg-security-audit/findings/Kubernetes%20Final%20Report.pdf ///https://www.cncf.io/blog/2019/08/06/open-sourcing-the-kubernetes-security-audit/

• http://thefluffyadmin.net/?p=1485https://www.aquasec.com/resources/kubernetes-101/

• https://container.training/

• https://github.com/madhuakula/introduction-to-containers-using-docker

• https://github.com/appsecco/defcon-26-workshop-attacking-and-auditing-docker-containers

• https://www.youtube.com/watch?v=zeS6OyDoy78 - K8s series 101

• https://medium.com/@flag_seeker/linux-container-from-scratch-339c3ba0411d

• https://labs.play-with-k8s.com/

• https://twitter.com/IanColdwater/status/1239219333697540096 - Best Resources

• https://cri-o.io/

• https://rhinosecuritylabs.com/aws/cloud-container-attack-tool/ - Attack Tool

• https://anchore.com/integrating-anchore-scanning-into-jenkins-pipeline-via-jenkinsfile/

• https://jenkins.io/blog/2018/06/20/anchore-image-scanning/

• https://aws.amazon.com/blogs/devops/build-a-continuous-delivery-pipeline-for-your-container-images-with-amazon-ecr-as-source/

• https://aws.amazon.com/blogs/compute/scanning-docker-images-for-vulnerabilities-using-clair-amazon-ecs-ecr-aws-codepipeline/

• https://jenkins.io/blog/2018/06/20/anchore-image-scanning/

• https://aws.amazon.com/blogs/containers/scanning-images-with-trivy-in-an-aws-codepipeline/

• https://github.com/genuinetools/amicontained

• https://www.marcolancini.it/2018/blog-learn-kubernetes/

• Tool - https://github.com/darkbitio/mkit

• Here's another one from KubeCon 2019 (Attacking and Defending Kubernetes Clusters: A Guided Tour Walkthrough Guide) - https://securekubernetes.com/

• https://www.bustakube.com

• Kuberenetes RECON -https://www.lacework.com/kubernetes-recon-attack-matrix/

• https://blog.appsecco.com/kubernetes-from-an-attackers-perspective-owasp-bay-area-meetup-c0c78a5bfb4e

Blogs

• https://capsule8.com/blog/container-security-nobody-knows-what-it-means-but-its-provocative/

• https://jackleadford.github.io/containers/2020/03/06/pvpost.html

• https://www.stackrox.com/post/2017/08/hardening-docker-containers-and-hosts-against-vulnerabilities-a-security-toolkit/

• https://www.youtube.com/watch?v=VqThnb-GML4 -- REcon - James Condon

Devsecops:

• https://kube.academy/courses/building-applications-for-kubernetes

• https://www.magalix.com/blog/deploying-an-application-on-kubernetes-from-a-to-z

• https://medium.com/rackbrains/kubernetes-101-part-2-deploying-apps-to-kubernetes-cluster-fcad2615d59