Minor changes-> removed unused imports & small fixes

This commit is contained in:
ori.agmon
2018-10-09 22:03:31 +03:00
committed by oriagmon
parent 2930167d78
commit a3a7e33f9c

View File

@@ -5,7 +5,7 @@ import requests
from ...core.events import handler
from ...core.events.types import Vulnerability, Event, OpenPortEvent
from ...core.types import ActiveHunter, Hunter, KubernetesCluster, InformationDisclosure, RemoteCodeExec, UnauthenticatedAccess, AccessRisk
from ...core.types import Hunter, KubernetesCluster, RemoteCodeExec, AccessRisk
""" Vulnerabilities """
@@ -37,7 +37,7 @@ class AccessApiServerViaServiceAccountToken(Hunter):
def access_api_server(self):
logging.debug(self.event.host)
res = requests.get('https://' + str(self.event.host) + ':6443/api', headers={'Authorization': 'Bearer ' + self.service_account_token_evidence},
res = requests.get("https://{host}:{port}/api".format(host=self.event.host, port=6443), headers={'Authorization': 'Bearer ' + self.service_account_token_evidence},
verify=False)
self.api_server_evidence = res.content
return res.status_code == 200 and res.content != ''
@@ -55,6 +55,5 @@ class AccessApiServerViaServiceAccountToken(Hunter):
self.publish_event(ServiceAccountTokenAccess(self.service_account_token_evidence))
if self.access_api_server():
self.publish_event(ServerApiAccess(self.api_server_evidence))
except:
import traceback
traceback.print_exc()
except: #We dont want to interrupt the program on any connection error)
pass