Conference:  KubeCon + CloudNativeCon North America 2022

Authors: Marek Siarkowicz, Benjamin Wang

2022-10-26

Earlier the year there was an event that shook the cloud native ecosystem. The latest release of etcd had a critical data inconsistency issue. Etcd, the critical component that powers many cloud native solutions including Kubernetes, could corrupt your data. The issue was so bad, that it required every single administrator to take an action or risk their system becoming unrecoverable. This presentation will discuss what led to the data inconsistency issues, how they were discovered, what was needed to fix them and what lessons we learned that could benefit the whole community.

Conference:  OWASP 20th Anniversary Event

Authors: Sam Stepanyan

2021-09-24

The OWASP Nettacker Project is an open-source software tool that assists with penetration testing by automating tasks such as information gathering and vulnerability scanning. It is written in Python and has a modular structure that allows for easy creation of custom modules. The tool is fast performing and customizable, with profiles that bundle modules focused on specific tasks. Its main use case is asset discovery, allowing users to scan their network for open ports, default credentials, specific vulnerabilities, subdomains, and expired SSL certificates. The tool can be automated using the command line and provides results in CSV, JSON, and HTML formats. The latest version of the tool uses YAML for module writing, making it easier to contribute new modules. The project is open source and welcomes contributions from the community.

• OWASP Nettacker Project is an open-source software tool for penetration testing
• It is written in Python and has a modular structure
• The tool is fast performing and customizable
• Its main use case is asset discovery
• The tool can be automated using the command line and provides results in CSV, JSON, and HTML formats
• The latest version of the tool uses YAML for module writing, making it easier to contribute new modules
• The project is open source and welcomes contributions from the community