PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

kdigger: a Context Discovery Tool for Kubernetes

blog.quarkslab.com | research | #cloud | #cloud-security | #kubernetes | #ctf | #pentest | #tool | #context-discovery
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarkslab introduces kdigger, an open-source context discovery tool for Kubernetes built from a KubeCon CTF challenge, helping pentesters enumerate information inside a Kubernetes cluster.
Published
Collected

Related coverage

tool · github.com
Peach: Single-user, Local-first Personal Media Library and Management System
Offers a privacy-respecting, local-first alternative for media library indexing and playback, combining cloud-drive integration with automated scraping while keeping sensitive viewing data strictly local.
blog · vercel.com
Mitigating Denial of Wallet risks with Vercel
Protect against Denial of Wallet (DoW) attacks with Vercel. DoW exploits cloud scalability to inflate costs. Vercel provides solutions like budget alerts, spend limits, and anomaly detection to safeguard workloads and maintain financial stability.
blog · vercel.com
Introducing Vercel Firewall and Vercel Secure Compute
Vercel Secure Compute and Vercel Firewall for enhanced protection of your applications on the frontend cloud
research · blog.quarkslab.com
Bypassing Android Hardware Attestation from the Analyst's Chair
Hardware key attestation lets an Android app prove to its backend that a key lives in secure hardware on a locked, verified device. It is also the wall that stops a security analyst working on a rooted phone. This article opens the mechanism from the analyst's chair, from the certificate chain and the attestation extension down to the root of trust, then shows a simple bypass that never touches the secure hardware. We relay the attestation to a clean device and splice a genuine chain back into the target app with a Frida hook. A companion repository ships the validation backend, the demo apps and the instrumentation, so the whole setup can be run and inspected rather than taken on faith.
research · blog.quarkslab.com
SightHouse: Automated function identification
Quarkslab presents SightHouse, an open-source reverse-engineering tool that retrieves program metadata and identifies functions already known from other libraries, binaries or online source code.
research · blog.quarkslab.com
Getting started with Wirego
An introduction to Wirego, a Quarkslab tool that funnels Wireshark's plugin API over ZMQ so reverse engineers can write dissectors in friendly languages such as Python or Go.
Back