How to Deploy Honeypots into your Kubernetes
summary
Demonstrates deploying a vulnerable clone of PhpMyAdmin with an nginx+php‑fpm+MySQL backend and includes the Shadowd C daemon injected into the PHP files; provides Kubernetes YAML to expose front‑end ports and a separate shadow UI, runs in learning mode, tails every access and emits attack signatures. Claims it runs inside Kubernets (K8S) clusters, captures real hits, and alerts early; notes surprising low adoption (one hand in the room, Gartner expected ~10% adoption but observed ~2%).
AI-written summary · about
chapters (10)
- 0:00Start
- 0:17How Many of You Are Using Docker in Your Environment
- 8:04Data Breach Investigation Report
- 10:10What Is Lateral Movements
- 13:15Honeypot Environments
- 18:44High Interaction Honeypot Ideas
- 22:35Make Files
- 23:29Yama Files
- 24:42User Interface
- 26:52Moving Target Defense
related talks
45mThe Hacker’s Guide to Kubernetes
29mKubernetes Security: Attacking and Defending K8s Clusters
42mKubernetes for PHP developers
38mKubernetes Security: Attacking and Defending K8s Clusters
19mHacking Kubernetes
38mKubernetes Security: Attacking and Defending K8s Clusters
38mA Treasure Map of Hacking (and Defending) Kubernetes
46mThe Hacker's Guide to Kubernetes