new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

OWASP Cheat Sheets · all subjects

attack-surface/cloud

4 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

Microservice and Cloud Native application attack surface assessment

When assessing attack surface for microservice and cloud-native applications, prioritize components reachable from external attack sources such as the Internet. These components may be located behind tiers of proxies, load balancers and ingress controllers and may auto-scale without warning. Tools like Cilium Hubble and kubeshark assist in visualizing attack surface for Kubernetes and service-mesh deployments.

AWS EKS hardening tools

For securing managed-service Kubernetes on AWS EKS, use hardeneks (github.com/aws-samples/hardeneks) or MKAD - Managed Kubernetes Auditing Toolkit from DataDog (github.com/DataDog/managed-kubernetes-auditing-toolkit).

Kubernetes default control plane ports

Control plane nodes use the following TCP ports: 6443 for Kubernetes API Server, 2379-2380 for etcd server client API, 10250 for Kubelet API, 10259 for kube-scheduler, 10257 for kube-controller-manager, and 10255 for Read-Only Kubelet API.

Kubernetes default worker node ports

Worker nodes use the following TCP ports: 10248 for Kubelet Healthz API, 10249 for Kube-proxy Metrics API, 10250 for Kubelet API, 10255 for Read-Only Kubelet API, 10256 for Kube-proxy Healthz API, and 30000-32767 for NodePort Services.

Give your agent this brain