TR08

A new two-day workshop in english.

Offensive K8s Security 101

Book now using the voucher code: TR25_HMTRAINING and save an additional 5% of the current valid rate of any package!

Overview

Container orchestration has been the driver for velocious software development and reliability engineering. But how to ensure the secure operation of your apps in a Kubernetes (K8s) cluster? In this workshop we take the perspective of a security auditor and attacker to attack and defend a shared Kubernetes cluster together.

Container, microservices, Kubernetes, GitOps - all those terms dominate the modern software development teams and processes. In the first part of this course, you learn the technological basics behind all those terms. In the second part, you take the perspective of a security auditor and finally of an attacker and learn to attack and defend a shared Kubernetes cluster. Among others, you will gain answers for the following questions:

• How to audit the security of a Kubernetes cluster?
• What are the most common security pitfalls in (managed) Kubernetes clusters?
• How to compromise a Kubernetes cluster?

All topics are guided by and demonstrated with practical hands-on exercises in a shared K3s Kubernetes cluster (in Hetzner Cloud). At the end of this workshop the participants will have gained in-depth knowledge about the hardening and attacking of Kubernetes clusters and the impact of misconfigurations for deployed application architectures and the operation of a modern microservice infrastructure. The workshop ends with an attack and defense game where the participants attack other participants and defend themselves by applying their knowledge learned along the way.

Who should attend this training?

• Security professionals who want to learn how to audit and pentest a K8s cluster.
• Kubernetes operators who want to learn how to defend a cluster and impact of misconfigurations.

Requirements

The attendees should have:

• Basic knowledge of using the Linux Bash command line.
• At least beginner and intermediate knowledge about Docker container and K8s container orchestration.
• Ideally offensive security practice to have fun during the attack & defense.

About the Trainers

Sebastian Funke is an IT Security Analyst and Researcher at ERNW Enno Rey Netzwerke GmbH with over 8 years of expertise. His daily work covers a wide range of topics from security assessments in complex enterprise landscapes, focusing on classical penetration tests of networks, desktop and web applications, as well as container and (multi-)cloud environments.

Sven Nobis works as a Security Analyst at ERNW, performing application and infrastructure assessments. He is mainly focusing on web application security and cloud infrastructure security. Besides IT security, he is a passionate developer and trying to link his experiences to the everyday work.

Booking

Recommended online booking of trainings through:

https://troopers.de/tickets/

Voucher code: TR25_HMTRAINING

Using this voucher code automatically gives you an additional 5% off the current valid price! You can register with this code until seats have run out.

Contact

Need assistance? Don’t hesitate to call us. We are fluent in English and German.
+49 6221 480390 or info@troopers.de

Booking is also possible offline through your trusted partner:

HM Training Solutions, Falkenstrasse 6, 63820 Elsenfeld, Germany

+49 6022 508200 / info@hm-ts.de
+49 6022 5089999 / https://hm-ts.de