praneeth132006

Demonstrate Ungoverned Usage of Third-Party Services (CICD-SEC-8) during an authorized assessment — abusing the broad, unaudited access…

Harden builds against dependency confusion / substitution and dependency-chain abuse (CICD-SEC-3).

Harden a CI/CD pipeline against Poisoned Pipeline Execution (PPE / CICD-SEC-4).

Detect and prevent self-hosted CI runner abuse (CICD-SEC-7).

Make the cloud audit trail tamper-resistant and detect attempts to blind it.

Harden containerized workloads against container-to-host escape and detect attempts.

Demonstrate cloud identity persistence during an authorized cloud assessment.

Proactively hunt for and detect attacker persistence in cloud IAM.

Demonstrate cloud credential theft via the instance metadata service (IMDS) during an authorized cloud assessment.

Harden cloud workloads against instance-metadata (IMDS) credential theft and detect attempts.

Demonstrate cloud audit-logging tampering during an authorized assessment — showing that an attacker with sufficient IAM can blind the…

Demonstrate container-to-host escape from an over-privileged container during an authorized assessment — privileged mode, host namespace…