Posts

This is the list layout for showing blog posts, which shows just the title and groups them by year of publication. Check out the blog layout for comparison.

2023

Containers for Pentesters

Malicious Compliance - Reflections on Trusting Container Scanners

Spec Driven Research for Fun and Profit

The myriad paths to improving open source security

2022

In theory, there’s no difference between practice and theory

Admission control in Kubernetes

Too Much to Choose – Making Sense of a Smorgasbord of Security Standard

First Steps to Full Lifecycle Security with Open Source Tools

2021

An Introduction to Container Hacking

Cluster Wrangling. How to make Kubernetes clusters secure and usable

Adventures in Container Vulnerability Scanning

Exploiting a slightly peculiar volume configuration with SIG-Honk

Getting Started with Kubernetes Security

2020

Hacking and Hardening in the Cloud Native Garden

Compromising Containers and Clusters

2019

Cloudy Clusters Catastrophe?

2018

A Hacker's Guide to Kubernetes and the Cloud

Night Of The Living Dead Pentest

2016

Docker - Security Myths, Security Legends

2015

Security and Modern software development

2014

Crossing the mountains of madness, how to avoid becoming a security cultist

2013

Your Framework Will Fail You

Pen Test Automation

2012

Shadowboxing your way to a secure application

2011

10 years of application security

Penetration testing must die

Practical strategies for securing your web application

2010

Breaking things with ruby

2009

Web Application Security. Rails and the OWASP Top 10