avishayil

Joined 13 years ago

Karma

66

Submissions

13

Member since

Jun 9

View on Hacker News

Recent submissions

Comment · 2 years ago

The primary purpose of this prpject is to showcase the deployment of a containerized application within an AWS environment, emphasizing security vulnerabilities for educational purposes.

CDK Goat – Vulnerable CDK application for educational purposes github.com

2 avishayil 2 years ago 1 comments

Comment · 5 years ago

An interactive wizard for launching EC2 instances that simplifies applying security best practices, by automatically creating limited security group / instance profile with SSM access to prevent misconfigurations.

secure_ec2: CLI tool that helps you to provision EC2 instance securely github.com

1 avishayil 5 years ago 1 comments

Comment · 5 years ago

Signing CloudFormation templates by creating a sha256 hash of the file, encrypted with the user's private key and stored in a base64 form in the CloudFormation template Metadata section.

Cf-Signer: CloudFormation Signing Utility github.com

2 avishayil 5 years ago 1 comments

Comment · 6 years ago

Jesus, maybe sentence me to death and that's it? someone made a pull request and I approved it and replaced the LMGTFY link.

Comment · 6 years ago

I have nothing against Capital One, but I must say that Netflix published this article in November 2018: https://medium.com/netflix-techblog/netflix-information-secu... I would expect folks to be prepared for this kind of vulnerability. Anyway the repo is for educational purposes and it's sarcastic name is, well, saracastic. Cap One is a great technology company.

Comment · 6 years ago

Must say I was inspired by them

Comment · 6 years ago

caponeme is a vulnerable cloud environment that meant to mock Capital One Breach for educational purposes

CapOneMe – a vulnerable cloud environment to demonstrate the Capital One breach github.com

146 avishayil 6 years ago 41 comments

Comment · 13 years ago

I don't think the deal will fall on THIS matter...