avishayil

66 karma · joined June 9, 2013

avishayil··on CDK Goat – Vulnerable CDK application for educational purposes

The primary purpose of this prpject is to showcase the deployment of a containerized application within an AWS environment, emphasizing security vulnerabilities for educational purposes.

avishayil··on secure_ec2: CLI tool that helps you to provision EC2 instance securely

An interactive wizard for launching EC2 instances that simplifies applying security best practices, by automatically creating limited security group / instance profile with SSM access to prevent misconfigurations.

avishayil··on Cf-Signer: CloudFormation Signing Utility

Signing CloudFormation templates by creating a sha256 hash of the file, encrypted with the user's private key and stored in a base64 form in the CloudFormation template Metadata section.

avishayil··on CapOneMe – a vulnerable cloud environment to demonstrate the Capital One breach

Jesus, maybe sentence me to death and that's it? someone made a pull request and I approved it and replaced the LMGTFY link.

avishayil··on CapOneMe – a vulnerable cloud environment to demonstrate the Capital One breach

I have nothing against Capital One, but I must say that Netflix published this article in November 2018: https://medium.com/netflix-techblog/netflix-information-secu... I would expect folks to be prepared for this kind of vulnerability. Anyway the repo is for educational purposes and it's sarcastic name is, well, saracastic. Cap One is a great technology company.

avishayil··on CapOneMe – a vulnerable cloud environment to demonstrate the Capital One breach

Must say I was inspired by them

avishayil··on CapOneMe – a vulnerable cloud environment to demonstrate the Capital One breach

caponeme is a vulnerable cloud environment that meant to mock Capital One Breach for educational purposes

avishayil··on Is the FTC targeting Google?

I don't think the deal will fall on THIS matter...