github/kube-hunter
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-hunter.git synced 2026-05-11 03:37:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixed all PR comments, just have to change the subscription now..

Browse Source
This commit is contained in:
ori.agmon
2018-10-14 12:00:13 +03:00
parent d401ede636
commit 0c6de23c65
1 changed files with 3 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
src/modules/hunting/secrets.py
View File

@@ -11,7 +11,7 @@ from ...core.types import Hunter, KubernetesCluster, AccessRisk
""" Vulnerabilities """
class secretsAccess(Vulnerability, Event):
class SecretsAccess(Vulnerability, Event):
""" Accessing the pod's secrets within a compromised pod might disclose valuable data to a potential attacker"""
def __init__(self, evidence):
@@ -33,10 +33,8 @@ class AccessSecrets(Hunter):
logging.debug('Passive Hunter is attempting to access pod\'s secrets directory')
# get all files and subdirectories files:
self.secrets_evidence = [val for sublist in [[os.path.join(i[0], j) for j in i[2]] for i in os.walk('/var/run/secrets/')] for val in sublist]
if len(self.secrets_evidence) > 0:
return True
return False
return True if len(self.secrets_evidence) > 0 else False
def execute(self):
if self.get_services():
self.publish_event(secretsAccess(self.secrets_evidence))
self.publish_event(SecretsAccess(self.secrets_evidence))