github/kube-hunter
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-hunter.git synced 2026-05-11 11:47:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merged in liz (pull request #1)

Browse Source 
Minor doc corrections
This commit is contained in:
Liz Rice
2018-07-04 08:15:36 +00:00
committed by Daniel Sagi
parent 2b690056b0 76bd6d456e
commit c2d2d56a32
2 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
README.md
View File

@@ -1,11 +1,11 @@
# Kube Hunter
---
Kube Hunter is an open source tool maintained by Aqua Security, which hunts weak kubernetes clusters.
The tool was developed to increase awareness and visibility for security issues in Kubernetes environments,
Kube Hunter hunts for security weaknesses in Kubernetes clusters. The tool was developed to increase awareness and visibility for security issues in Kubernetes environments.
_Developers, please read [Guidelines For Developing Your First Kube Hunter Module](src/README.md)_
## Hunting
by default, without any special flags, Kube Hunter will scan all of your machine's network interfaces for open kubernetes services.
_Developers, please read [Guidelines For Developing Your First Kube Hunter Module](src/README.md)_ *TODO*
## Hunting
by default, without any special flags, Kube Hunter will scan all of your machine's network interfaces for open kubernetes services.
To specify a specific cidr to scan, use the `--cidr` option. Example:
`./kube-hunter.py --cidr 192.168.0.0/24`

2
kube-hunter.py
View File

@@ -5,7 +5,7 @@ import logging
import sys
import time
parser = argparse.ArgumentParser(description='Kube-Hunter, Hunter for weak Kubernetes cluster')
parser = argparse.ArgumentParser(description='Kube-Hunter - hunts for security weaknesses in Kubernetes clusters')
parser.add_argument('--pod', action="store_true", help="set hunter as an insider pod")
parser.add_argument('--cidr', type=str, help="set manual cidr to scan, example: 192.168.0.0/16")
parser.add_argument('--quick', action="store_true", help="scanning only known small sections of the subnet")