madhuakula/kubernetes-goat
Kubernetes Goat
Kubernetes Goat is a security training environment designed for practicing the identification and exploitation of common vulnerabilities within an intentionally insecure cluster. It provides a controlled setting to simulate system exploitations, including container escapes, role misconfigurations, and server-side requests.
The project utilizes scenario-based vulnerability deployment to create specific security flaws. It includes utilities for environment management that allow the cluster to be restored to a clean baseline by removing vulnerable scenarios, service accounts, and role bindings.
The platform covers several core security domains, including cluster auditing against industry benchmarks, network security through policy implementation, and runtime defense via real-time activity monitoring. It also provides tools for configuration analysis to identify security gaps and the enforcement of network isolation boundaries.
Features
- Kubernetes Security Training - Provides a controlled, intentionally insecure Kubernetes cluster environment for practicing vulnerability identification and exploitation.
- Security Training Labs - Simulates container escapes, role misconfigurations, and server-side requests to teach cluster weakness identification.
- Live Cluster Security Scanners - Analyzes running cluster configurations and settings against security benchmarks to find gaps and misconfigurations.
- Security Scanning - Includes an automated tool that scans cluster configurations against industry benchmarks to identify security risks.
- Insecure State Reproducibility - Uses declarative configuration files to define and reproduce reproducible insecure cluster states.
- Security Benchmarking - Compares current cluster configurations against industry standard security benchmarks to identify security gaps.
- Kubernetes Network Security Policies - Implements Kubernetes NetworkPolicies to restrict traffic flow and simulate network-level security boundaries.
- Vulnerable Scenario Deployments - Deploys intentionally misconfigured Kubernetes objects to create specific security flaws for exploitation practice.
- Simulated Vulnerabilities - Deploys intentionally misconfigured scenarios to practice identifying and exploiting common security flaws.
- Security Configuration Auditing - Checks environments against security benchmarks and uses sanitization to identify configuration gaps.
- Kubernetes Security - Monitors cluster activity in real time to detect malicious behavior and practice enforcing security policies.
- Runtime Security Monitors - Integrates monitoring tools to track cluster activity and detect malicious behavior during exploitation attempts.
- Container Escape Analysis - Provides training on identifying and preventing attacks where processes break out of containers to access the host.
- Security Policy Enforcers - Uses monitoring and policy enforcement to detect and block malicious activities in real time.
- Vulnerable Environments - Vulnerable Kubernetes environment for security training.
- Learning - Listed in the “Learning” section of the Awesome K8s Security awesome list.
- Vulnerable Applications - Vulnerable cluster environment for practicing Kubernetes security.
- Vulnerable Infrastructure Labs - Vulnerable cluster environment for practicing kubernetes security.
