- 攻击容器集群管理平台
- 阿里云AccessKey泄露的利用
- 云上容器ATT&CK攻防矩阵
- 容器安全
- 云上渗透-基于阿里云环境渗透
- Kubernetes(K8s)横向移动办法
- Kubernetes安全入门
- Kubernetes安全测试实践录
- kubernetes集群渗透测试
- K0OTKIT：HACK K8S IN A K8S WAY
- 华为云CTF cloud非预期解之k8s渗透实战
- 云原生安全|基于容器ATT&CK矩阵模拟攻防对抗的思考
- 容器运行时信息收集技术介绍
- SERVERLESS安全研究——SERVERLESS安全风险
- SERVERLESS安全研究——SERVERLESS安全防护
- 针对AWS Lambda的运行时攻击
- AWS Lambda Node.js 反弹shell
- 谈谈云原生安全
- 云原生安全攻防技术浅析
- 云原生安全初认识之容器安全 Cheat Sheet
- 移花接木：看CVE-2020-8559如何逆袭获取集群权限
- 云原生之容器安全实践
- 红蓝对抗中的云原生漏洞挖掘及利用实录
- 云原生安全攻防｜使用eBPF逃逸容器技术分析与实践
- 云原生——容器和应用安全运营实践思考
- 容器安全之容器逃逸
- debugfs在容器逃逸中的作用
- 深入浅出云原生环境信息收集技术
- Tutorial: Kubernetes Vulnerability Scanning & Testing With Open Source
- S3存储桶数据泄露情况研究
- 容器镜像的安全备忘单(Cheatsheet)
- 红队视角下的公有云基础组件安全
- 云原生之Kubernetes安全
- 红蓝对抗 | 容器环境红队手法总结
- K8s渗透测试etcd的利用
- 云原生架构下的API安全防护方案
- K8s渗透测试之kube-apiserver利用
- serverless functions攻防初探
- K8s 6443批量入侵调查
- 容器逃逸方法
- AWS S3 对象存储攻防
- 火线沙龙｜浅谈云原生环境信息收集技术
- 火线沙龙｜Cloud RedTeam视角下元数据服务攻防实践
- https://github.com/rosehgal/k8s-In-30Mins
- https://github.com/cdk-team/CDK
- https://github.com/4ndersonLin/awesome-cloud-security
- https://github.com/Metarget/awesome-cloud-native-security
- https://github.com/Metarget/k0otkit
- https://github.com/Metarget/metarget
- https://github.com/Metarget/cloud-native-security-book
- https://github.com/neargle
- https://github.com/Xyntax
- https://github.com/k8s-sec/
- https://github.com/Pray3r/cloud-native-security
- https://github.com/krol3/workshop-cloud-native-security
- https://github.com/RhinoSecurityLabs/Cloud-Security-Research/
- https://github.com/RhinoSecurityLabs/Security-Research/
- https://github.com/RhinoSecurityLabs/AWS-IAM-Privilege-Escalation
- https://github.com/RhinoSecurityLabs/cloudgoat
- https://github.com/RhinoSecurityLabs/pacu
- https://github.com/nccgroup/ScoutSuite
- https://github.com/NetSPI/aws_consoler
- https://github.com/dagrz/aws_pwn
- https://github.com/bchew/dynamodump
- https://github.com/LMGsec/o365creeper
- https://github.com/busterb/msmailprobe
- https://github.com/nyxgeek/o365recon
- https://github.com/mdsecactivebreach/o365-attack-toolkit
- https://github.com/NetSPI/MicroBurst
- https://github.com/RhinoSecurityLabs/GCPBucketBrute
- https://github.com/pumasecurity/serverless-prey