Rewanth Tammana
Rewanth Tammana's Blog

Rewanth Tammana's Blog

Subscribe to my newsletter and never miss my upcoming articles

Kubectl Whisper Secrets: Create Kubernetes Secrets With Secure Input

Nov 3, 20212 min read

This blog post focuses on a plugin that allows end user to "Create Kubernetes secrets by taking secure input from the console". The in-line secret creation feature in Kubernetes is vulnerable to shoulder surfing attacks. In this blog, we will Glance...

Kubectl Whisper Secrets: Create Kubernetes Secrets With Secure Input

Kubectl Fields: One-liner Kubernetes Resource Hierarchy Dumper

Sep 3, 20216 min read

This blog post focuses on why I built the "Kubernetes resources hierarchy parser plugin". This plugin prints the hierarchy resources in one-liners & saves a ton of time for the end-users while writing or editing Kubernetes object configuration files....

Kubectl Fields: One-liner Kubernetes Resource Hierarchy Dumper

Enhancing the security audit logging of Harbor with OpenResty

Aug 27, 20215 min read

TL;DR In this blog post, we will be looking at some of the problems I have seen in Harbor private registry security audit logging with some possible solutions to meet security standards and requirements and finally, how I achieved the goal by leverag...

Enhancing the security audit logging of Harbor with OpenResty

Creating Malicious Admission Controllers

Aug 9, 20213 min read

Admission controllers play a crucial role in Kubernetes & are leveraged by multiple tools & teams to defend the clusters. A simple misconfiguration in the setup allows attackers to effortlessly leverage this defensive feature to perform offensive att...

Creating Malicious Admission Controllers

Minesweeper Hacked: How We Hacked An Android Game And Ranked First Globally

May 28, 20217 min read

Minesweeper Hacked: How we hacked an Android game to top the global leaderboard without even playing the game. Recently, we came across an Android game of Minesweeper. The game has been nicely developed and was fun to play. Although it was very tough...

Minesweeper Hacked: How We Hacked An Android Game And Ranked First Globally

GSOC 2017 with Nmap Security Scanner

May 23, 202114 min read

GSOC 2017 with Nmap Security Scanner Before we go any further, I thank each and everyone who helped me in my way to achieve this. But for this document, I would like to limit them to my mentors Daniel Miller and Fyodor from Nmap for choosing me over ...

GSOC 2017 with Nmap Security Scanner