~/teach
Teaching
Hands-on offensive Kubernetes security trainings at TROOPERS and with HM Training Solutions.
Most Kubernetes trainings show you how to run a cluster. In Offensive K8s Security 101 you learn how clusters fall over. You start by auditing a shared cluster the way an assessor would, then you attack it, and at the end everyone defends their own namespace against everyone else. I give it together with my ERNW colleague Sven Nobis.
Upcoming
-
Offensive Kubernetes Security 101
The public version of the offensive Kubernetes training, bookable through HM Training Solutions.
Past runs
-
Offensive K8s Security 101
Attack and defend a shared Kubernetes cluster, first through an auditor's eyes, then an attacker's: K8s fundamentals, auditing cluster security, common pitfalls of managed clusters and how clusters get compromised. All exercises run on a shared K3s cluster; the training ends with an attack-and-defence game between participants.
-
Offensive K8s Security 101
First run of the workshop at TROOPERS: auditing and attacking Kubernetes on a shared K3s cluster, from fundamentals to cluster compromise, ending in an attack-and-defence game.