Rohan's Personal Blog
In simple terms with Azure policy, you can audit, deny, and modify if any resource is misconfigured. It’s very helpful for creating secure defaults in Azure Cloud.why would you create secure defaults?For example, if someone from your organization is...
This is the easiest bug I have found by far in my overlong career, So it wouldn’t be long blog. My parents always told me to look forward to being like Mr. Arvinda Padhee, my hometown IAS officer. I...
If you have not gone through part-1(istio), I would recommend you to please visit- https://osquery.net/service-mesh-1/ & the labs are identical for this blog also. It really took a few days of effort.Linkerd uses a Rust-based micro proxy called Linkerd2-proxy....
In this blog, We will discuss how to implement end-to-end security between microservices. I will cover mostly Istio service mesh,linkerd service mesh & a hint of tenzu.If you want to reproduce the below labs you can use- https://github.com/c0ldb00t3r/k8s-poc/tree/main/service-mesh-demo.Set up...
OP-ED !!After working for many organizations as a full-time & CW security engineer, interviewed as well as interviewing for the position more than 100 times, I am writing this blog to help my fellow security engineers identify red flags...
What’s an admission controller?First of all, do you know what happens when you create a pod via Kubectl? Let’s do that -So when you create a pod, the API request goes to authentication and authorization. Then the pod object...
PSP admission controller was used by teams to validate and mutate security contexts. In simple terms, we define a set of controls with which pods can be created. If the control doesn’t satisfy it rejects or updates.If you to...
During the lockdown, I was in my hometown, and my brother was not giving the router dashboard access as I always set QoS to my systems. “Necessity is the mother of invention.”It needed to chain two issues for successful exploitation.It...
“The Certified Kubernetes Security Specialist (CKS) program provides assurance that a CKS has the skills, knowledge, and competence on a broad range of best practices for securing container-based applications and Kubernetes platforms during build, deployment and runtime. ” Prerequisites-You must...
CREST(Council for Registered Ethical Security Testers)-According to the official website, “CREST is the not-for-profit certification body representing the technical information security industry. CREST provides internationally recognized accreditation for organizations and individuals providing penetration testing, cyber-incident response, and threat intelligence...