Kubernetes Goat is a security training environment designed for practicing the identification and exploitation of common vulnerabilities within an intentionally insecure cluster. It provides a controlled setting to simulate system exploitations, including container escapes, role misconfigurations, and server-side requests. The project utilizes scenario-based vulnerability deployment to create specific security flaws. It includes utilities for environment management that allow the cluster to be restored to a clean baseline by removing vulnerable scenarios, service accounts, and role bindings.
TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.
CdkGoat is Bridgecrew's "Vulnerable by Design" AWS CDK repository. CdkGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
Cfngoat is Bridgecrew's "Vulnerable by Design" Cloudformation repository. Cfngoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
The main features of bridgecrewio/cfngoat are: Security Training Labs, Cloud Security, Vulnerable Applications.
Open-source alternatives to bridgecrewio/cfngoat include: madhuakula/kubernetes-goat — Kubernetes Goat is a security training environment designed for practicing the identification and exploitation of… juice-shop/juice-shop — Juice Shop is a self-contained web application designed as a platform for cybersecurity education and security… bishopfox/iam-vulnerable — Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground. bridgecrewio/cdkgoat — CdkGoat is Bridgecrew's "Vulnerable by Design" AWS CDK repository. CdkGoat is a learning and training project that… bridgecrewio/terragoat — TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project… rhinosecuritylabs/cloudgoat — CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool.