TechEx/mkdocs.yml at master · EvanSpangler/TechEx · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
site_name: Wiz Technical Exercise
site_description: Comprehensive documentation for the Wiz Security Technical Exercise - A deliberately vulnerable AWS infrastructure for security training
site_author: Evan Spangler
site_url: https://evanspangler.github.io/TechEx/
repo_url: https://github.com/EvanSpangler/TechEx
repo_name: TechEx
use_directory_urls: true

theme:
  name: material
  palette:
    - scheme: slate
      primary: deep purple
      accent: cyan
      toggle:
        icon: material/brightness-4
        name: Switch to light mode
    - scheme: default
      primary: deep purple
      accent: cyan
      toggle:
        icon: material/brightness-7
        name: Switch to dark mode
  features:
    - navigation.tabs
    - navigation.sections
    - navigation.expand
    - navigation.top
    - search.highlight
    - search.share
    - content.code.copy
    - content.code.annotate
  icon:
    repo: fontawesome/brands/github

plugins:
  - search

markdown_extensions:
  - abbr
  - admonition
  - attr_list
  - def_list
  - footnotes
  - md_in_html
  - toc:
      permalink: true
  - pymdownx.arithmatex:
      generic: true
  - pymdownx.betterem:
      smart_enable: all
  - pymdownx.caret
  - pymdownx.details
  - pymdownx.emoji:
      emoji_index: !!python/name:material.extensions.emoji.twemoji
      emoji_generator: !!python/name:material.extensions.emoji.to_svg
  - pymdownx.highlight:
      anchor_linenums: true
      line_spans: __span
      pygments_lang_class: true
  - pymdownx.inlinehilite
  - pymdownx.keys
  - pymdownx.magiclink:
      repo_url_shorthand: true
  - pymdownx.mark
  - pymdownx.smartsymbols
  - pymdownx.superfences:
      custom_fences:
        - name: mermaid
          class: mermaid
          format: !!python/name:pymdownx.superfences.fence_code_format
  - pymdownx.tabbed:
      alternate_style: true
  - pymdownx.tasklist:
      custom_checkbox: true
  - pymdownx.tilde

extra:
  social:
    - icon: fontawesome/brands/github
      link: https://github.com/evanspangler
    - icon: fontawesome/brands/linkedin
      link: https://linkedin.com/in/evanspangler

extra_css:
  - stylesheets/extra.css

nav:
  - Home: index.md
  - Getting Started:
    - Quick Start: getting-started/quickstart.md
    - Prerequisites: getting-started/prerequisites.md
    - Installation: getting-started/installation.md
    - Configuration: getting-started/configuration.md
  - Build:
    - Build Overview: build/overview.md
    - Container Build: build/container.md
    - VM Provisioning: build/vm-provisioning.md
    - Application Build: build/application.md
  - Architecture:
    - Overview: architecture/overview.md
    - Network Topology: architecture/network.md
    - Data Flow: architecture/data-flow.md
    - Security Model: architecture/security-model.md
  - Infrastructure:
    - EKS Cluster: infrastructure/eks.md
    - MongoDB VM: infrastructure/mongodb.md
    - Wazuh SIEM: infrastructure/wazuh.md
    - Red Team Instance: infrastructure/redteam.md
    - S3 Buckets: infrastructure/s3.md
    - IAM Roles: infrastructure/iam.md
    - Networking: infrastructure/networking.md
  - Security:
    - Vulnerability Overview: security/overview.md
    - Public S3 Bucket: security/s3-public.md
    - Overprivileged IAM: security/iam-overprivileged.md
    - Exposed SSH: security/ssh-exposed.md
    - K8s Cluster-Admin: security/k8s-cluster-admin.md
    - Secrets Exposure: security/secrets-exposure.md
    - Outdated MongoDB: security/mongodb-outdated.md
    - IMDS Exploitation: security/imds.md
  - Demos:
    - Demo Cheat Sheet: demo-guide.md
    - Demo Overview: demos/overview.md
    - Attack Chain: demos/attack-chain.md
    - S3 Exfiltration: demos/s3-exfil.md
    - Kubernetes Exploitation: demos/k8s-exploit.md
    - Privilege Escalation: demos/privesc.md
    - Detection & Response: demos/detection.md
  - Development:
    - Overview: development/index.md
    - Local Setup: development/local-setup.md
    - Application Architecture: development/application-architecture.md
  - Testing:
    - Overview: testing/index.md
    - Security Scanning: testing/security-scanning.md
    - Validation: testing/validation.md
    - Application Tests: testing/application-tests.md
    - CI/CD Integration: testing/ci-integration.md
  - Operations:
    - Overview: operations/index.md
    - Runbooks: operations/runbooks.md
    - Disaster Recovery: operations/disaster-recovery.md
  - Reference:
    - API Reference: reference/api.md
    - Makefile Commands: reference/makefile.md
    - Terraform Modules: reference/terraform.md
    - Terraform Outputs: reference/outputs.md
    - Environment Variables: reference/environment.md
    - GitHub Actions: reference/github-actions.md
    - Cost Reference: reference/costs.md
    - Glossary: reference/glossary.md
    - Requirements Checklist: reference/requirements-checklist.md
  - Troubleshooting:
    - Common Issues: troubleshooting/common-issues.md
    - AWS Issues: troubleshooting/aws.md
    - Kubernetes Issues: troubleshooting/kubernetes.md
    - Terraform Issues: troubleshooting/terraform.md
    - FAQ: troubleshooting/faq.md