Infrastructure as Code (IaC) Penetration Testing

R3zk0n · October 2, 2025

IaC   Security
Contents

    Resources

    • https://about.gitlab.com/blog/2022/02/17/fantastic-infrastructure-as-code-security-attacks-and-how-to-find-them/
    • TerraGoat: https://bridgecrew.io/blog/terragoat-open-source-infrastructure-code-security-training-project-terraform/
      • https://github.com/bridgecrewio/terragoat
    • Checkov (Static Analysis for IaC): https://github.com/bridgecrewio/checkov

    Twitter, Facebook