Liz Rice and GitHub
b60cdf2043
Merge pull request #128 from DrMurx/more_secure_cloudip_detection
...
Access cloud IP detection service via HTTPS
2019-05-30 23:24:31 +01:00
Liz Rice and GitHub
8fad9dd2ac
Merge branch 'master' into more_secure_cloudip_detection
2019-05-30 23:20:41 +01:00
danielsagi and GitHub
c6673869d7
Merge pull request #129 from aquasecurity/add_enum_to_requirements
...
added enum34 to requirements.txt
2019-05-25 20:43:55 +03:00
Daniel Sagi
55ed8d0a80
added enum34 to requirements.txt
2019-05-25 20:00:55 +03:00
Jan Kunzmann
0f3670dff5
Access cloud IP detection service via HTTPS
2019-05-23 13:03:18 +02:00
danielsagi and GitHub
e69e591fab
Merge pull request #125 from aquarnd/hunter_statistics_should_count_vulnerabilities_only
...
1. Change hunter statistics to count vulnerabilities only.
2019-05-21 19:12:13 +03:00
nshauli
ac7027dab6
1. Change hunter statistics to count vulnerabilities only.
...
2. Add --statistics flag support.
3. Show hunter statistics only if --statistics was set.
4. Few infrastructure improvements.
2019-05-20 21:32:52 +03:00
Liz Rice and GitHub
d7014fd06d
Merge pull request #121 from tomek-bt/update-readme-for-non-ssh
...
Update README to reference non-SSH URL
2019-05-18 09:44:44 +01:00
Tomek Rabczak
e536f53b88
Update README to reference non-SSH URL
2019-05-17 17:44:42 +00:00
Liz Rice and GitHub
f7eccca55d
Merge pull request #119 from aquasecurity/security-fix
...
CVE-2019-11324
2019-05-14 15:23:44 +01:00
Liz Rice
d6f76dc295
CVE-2019-11324
2019-05-14 15:15:11 +01:00
Liz Rice and GitHub
229ff40a01
Fix bad merge
...
And a typo while I'm here
2019-05-14 14:07:33 +01:00
Liz Rice and GitHub
7d038f50dc
Merge branch 'master' into insecure_port
2019-05-14 12:00:51 +01:00
Liz Rice and GitHub
c860406075
Merge pull request #116 from aquarnd/add_suppport_for_hunters_list
...
Add support for hunters list as part of the reports.
2019-05-14 11:55:40 +01:00
nshauli
b4df6b5298
Add support for hunters list as part of the reports.
...
Each reported hunter includes name, description and number of events.
Add severity field to each vulnerability report.
2019-05-14 12:44:30 +03:00
Liz Rice
50dfbd0daa
Update requirements.txt
2019-05-13 13:52:51 +01:00
Liz Rice
5cf68a318f
Tests for insecure port access
2019-05-13 13:18:03 +01:00
Liz Rice
fd5ed8a166
.gitignore additions
2019-05-13 12:26:22 +01:00
Liz Rice
1db39fd966
Include evidence on exposed run handler
2019-05-13 12:24:28 +01:00
Liz Rice
bfb14e229a
Combine two debug messages, for clarity
2019-05-13 12:23:53 +01:00
Liz Rice
da832df36d
Test for insecure port being open on port 8080
2019-05-13 12:23:23 +01:00
nshauli and jerbia
f0160e2eba
Update imports and dependencies for creating single application of kube-hunter using pyinstaller ( #114 )
2019-04-16 15:37:34 +03:00
Liz Rice and GitHub
0707954efb
Add note that current container is out of date
2019-03-30 08:40:14 +01:00
Liz Rice and GitHub
35e607f966
Merge pull request #101 from aquasecurity/api-server-hunt-improvements
...
API server hunt improvements
2019-03-20 12:30:48 +00:00
Liz Rice and GitHub
4051fa708d
Remove unused class
2019-03-20 11:57:46 +00:00
Liz Rice and GitHub
fa99b4edd1
Remove unused class
2019-03-20 11:51:24 +00:00
Liz Rice and GitHub
f10632f47e
Merge branch 'master' into api-server-hunt-improvements
2019-03-18 17:58:12 +00:00
Liz Rice and GitHub
33ce1461bb
Merge pull request #104 from mcherny/fix-issue-99
...
Fixes #99 - pod local vulnerabilities are now reported as "Local to Pod" ( <pod name> )
2019-03-18 17:53:30 +00:00
Liz Rice and GitHub
71903ba942
Merge branch 'master' into fix-issue-99
2019-03-18 17:50:06 +00:00
Liz Rice and GitHub
4daaf53f89
Merge pull request #105 from mcherny/fix-issue-98
...
Fix #98 - cvehunter now using service token discovered in hosts.py
2019-03-18 17:48:39 +00:00
Liz Rice and GitHub
efa96f5c41
Merge branch 'master' into fix-issue-98
2019-03-18 17:28:31 +00:00
Liz Rice and GitHub
b5b3b6b039
Merge pull request #106 from westonsteimel/update-dockerfile
...
python3.7 in dockerfile and travis
2019-03-13 06:10:10 -07:00
Michael Cherny
c59b199a24
Removed unused variable
2019-03-11 00:56:24 +05:30
Liz Rice
1b849947fa
Use a predicate and avoid a whole extra event
2019-03-08 16:27:52 +00:00
Weston Steimel
22334c67ad
update dockerfile and travis
...
* Update docker image to python 3.7.2 and alpine3.9
* Update travis to test python3.7
* Remove part about using python2 in python3-based environment from
README
Signed-off-by: Weston Steimel <weston.steimel@gmail.com >
2019-03-07 22:36:01 +00:00
Michael Cherny
0c0a68883d
Fix #98 - cvehunter now using service token discovered in hosts.py
...
We use the token if available.
2019-03-07 20:44:56 +02:00
Michael Cherny
1cd44832e6
Fixes #99 - pod local vulnerabilities are now reported as "Local to Pod" ( <pod name> )
...
Event can now implement 'location()' method that return string representing events logical location.
In events chain, the 'newest' event available location method will be used. This is because we compose (chain) events.
Core changed to support it.
Added 'location()' method to relevant event classes.
Reports are now using vulnerability.location() to retrieve location.
2019-03-07 14:45:26 +02:00
Liz Rice and GitHub
f2b3573bee
Add python 3
2019-03-06 20:36:43 +00:00
Liz Rice and GitHub
d66180d7cc
Add build status badge
2019-03-05 12:33:16 +00:00
Liz Rice and GitHub
c44d6874dc
Update travis for python 3 as well as python 2
...
Now that we have #95
2019-03-05 12:30:22 +00:00
Liz Rice and GitHub
fcee9d54ee
Merge pull request #95 from westonsteimel/python3
...
support python3
2019-03-05 12:28:59 +00:00
Liz Rice
991214f8db
Remove temp debugging
2019-03-05 10:05:01 +00:00
Weston Steimel
71f52c0d2c
add future as requirement
...
Signed-off-by: Weston Steimel <weston.steimel@gmail.com >
2019-03-04 21:38:05 +00:00
Weston Steimel
45d32be212
support for python3
...
Signed-off-by: Weston Steimel <weston.steimel@gmail.com >
2019-03-04 21:37:59 +00:00
Liz Rice and GitHub
5b8fd07714
Merge pull request #100 from idanr1986/cve_hunter
...
changed cve details
2019-03-04 15:40:12 +00:00
Idan Revivo
b7222d26e7
cve info change
2019-03-04 17:05:17 +02:00
Liz Rice
0f3eac9a12
Didn’t end up basing the Active Hunter on the passive one
2019-03-04 14:07:53 +00:00
Liz Rice
7296805d58
Only create per-namespace objects if we have found namespaces
2019-03-04 13:47:49 +00:00
Liz Rice
93ab052e23
Tidy up a bit more
2019-03-04 13:06:23 +00:00
Liz Rice
e77f5fdcc8
Show in the report whether access was via service token or not
2019-03-04 12:35:57 +00:00