Forwarded from Cult Of Wire
ML в безопасности CI это может хорошо, но защищать и атаковать самим лучше.
Два awesome-списка.
Для атакующих: Awesome CI/CD Attacks
- Techniques
- Publicly Exposed Sensitive Data
- Initial Code Execution
- Post Exploitation
- Defense Evasion
- Offensive Tools
- Case Studies
Для защищающих: Awesome CI/CD Security
- Book
- Blogs
- Videos
- Repositories
- Playground
- Cases
Два awesome-списка.
Для атакующих: Awesome CI/CD Attacks
- Techniques
- Publicly Exposed Sensitive Data
- Initial Code Execution
- Post Exploitation
- Defense Evasion
- Offensive Tools
- Case Studies
Для защищающих: Awesome CI/CD Security
- Book
- Blogs
- Videos
- Repositories
- Playground
- Cases
GitHub
GitHub - TupleType/awesome-cicd-attacks: Practical resources for offensive CI/CD security research. Curated the best resources…
Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021. - TupleType/awesome-cicd-attacks