Commit Graph
661 Commits
Author SHA1 Message Date
Liz RiceandGitHub b60cdf2043 Merge pull request #128 from DrMurx/more_secure_cloudip_detection
Access cloud IP detection service via HTTPS
2019-05-30 23:24:31 +01:00
Liz RiceandGitHub 8fad9dd2ac Merge branch 'master' into more_secure_cloudip_detection 2019-05-30 23:20:41 +01:00
danielsagiandGitHub c6673869d7 Merge pull request #129 from aquasecurity/add_enum_to_requirements
added enum34 to requirements.txt
2019-05-25 20:43:55 +03:00
Daniel Sagi 55ed8d0a80 added enum34 to requirements.txt 2019-05-25 20:00:55 +03:00
Jan Kunzmann 0f3670dff5 Access cloud IP detection service via HTTPS 2019-05-23 13:03:18 +02:00
danielsagiandGitHub e69e591fab Merge pull request #125 from aquarnd/hunter_statistics_should_count_vulnerabilities_only
1. Change hunter statistics to count vulnerabilities only.
2019-05-21 19:12:13 +03:00
nshauli ac7027dab6 1. Change hunter statistics to count vulnerabilities only.
2. Add --statistics flag support.
3. Show hunter statistics only if --statistics was set.
4. Few infrastructure improvements.
2019-05-20 21:32:52 +03:00
Liz RiceandGitHub d7014fd06d Merge pull request #121 from tomek-bt/update-readme-for-non-ssh
Update README to reference non-SSH URL
2019-05-18 09:44:44 +01:00
Tomek Rabczak e536f53b88 Update README to reference non-SSH URL 2019-05-17 17:44:42 +00:00
Liz RiceandGitHub f7eccca55d Merge pull request #119 from aquasecurity/security-fix
CVE-2019-11324
2019-05-14 15:23:44 +01:00
Liz Rice d6f76dc295 CVE-2019-11324 2019-05-14 15:15:11 +01:00
Liz RiceandGitHub 229ff40a01 Fix bad merge
And a typo while I'm here
2019-05-14 14:07:33 +01:00
Liz RiceandGitHub 7d038f50dc Merge branch 'master' into insecure_port 2019-05-14 12:00:51 +01:00
Liz RiceandGitHub c860406075 Merge pull request #116 from aquarnd/add_suppport_for_hunters_list
Add support for hunters list as part of the reports.
2019-05-14 11:55:40 +01:00
nshauli b4df6b5298 Add support for hunters list as part of the reports.
Each reported hunter includes name, description and number of events.
Add severity field to each vulnerability report.
2019-05-14 12:44:30 +03:00
Liz Rice 50dfbd0daa Update requirements.txt 2019-05-13 13:52:51 +01:00
Liz Rice 5cf68a318f Tests for insecure port access 2019-05-13 13:18:03 +01:00
Liz Rice fd5ed8a166 .gitignore additions 2019-05-13 12:26:22 +01:00
Liz Rice 1db39fd966 Include evidence on exposed run handler 2019-05-13 12:24:28 +01:00
Liz Rice bfb14e229a Combine two debug messages, for clarity 2019-05-13 12:23:53 +01:00
Liz Rice da832df36d Test for insecure port being open on port 8080 2019-05-13 12:23:23 +01:00
nshauliandjerbia f0160e2eba Update imports and dependencies for creating single application of kube-hunter using pyinstaller (#114) 2019-04-16 15:37:34 +03:00
Liz RiceandGitHub 0707954efb Add note that current container is out of date 2019-03-30 08:40:14 +01:00
Liz RiceandGitHub 35e607f966 Merge pull request #101 from aquasecurity/api-server-hunt-improvements
API server hunt improvements
2019-03-20 12:30:48 +00:00
Liz RiceandGitHub 4051fa708d Remove unused class 2019-03-20 11:57:46 +00:00
Liz RiceandGitHub fa99b4edd1 Remove unused class 2019-03-20 11:51:24 +00:00
Liz RiceandGitHub f10632f47e Merge branch 'master' into api-server-hunt-improvements 2019-03-18 17:58:12 +00:00
Liz RiceandGitHub 33ce1461bb Merge pull request #104 from mcherny/fix-issue-99
Fixes #99 - pod local vulnerabilities are now reported as "Local to Pod" ( <pod name> )
2019-03-18 17:53:30 +00:00
Liz RiceandGitHub 71903ba942 Merge branch 'master' into fix-issue-99 2019-03-18 17:50:06 +00:00
Liz RiceandGitHub 4daaf53f89 Merge pull request #105 from mcherny/fix-issue-98
Fix #98 - cvehunter now using service token discovered in hosts.py
2019-03-18 17:48:39 +00:00
Liz RiceandGitHub efa96f5c41 Merge branch 'master' into fix-issue-98 2019-03-18 17:28:31 +00:00
Liz RiceandGitHub b5b3b6b039 Merge pull request #106 from westonsteimel/update-dockerfile
python3.7 in dockerfile and travis
2019-03-13 06:10:10 -07:00
Michael Cherny c59b199a24 Removed unused variable 2019-03-11 00:56:24 +05:30
Liz Rice 1b849947fa Use a predicate and avoid a whole extra event 2019-03-08 16:27:52 +00:00
Weston Steimel 22334c67ad update dockerfile and travis
* Update docker image to python 3.7.2 and alpine3.9
* Update travis to test python3.7
* Remove part about using python2 in python3-based environment from
README

Signed-off-by: Weston Steimel <weston.steimel@gmail.com>
2019-03-07 22:36:01 +00:00
Michael Cherny 0c0a68883d Fix #98 - cvehunter now using service token discovered in hosts.py
We use the token if available.
2019-03-07 20:44:56 +02:00
Michael Cherny 1cd44832e6 Fixes #99 - pod local vulnerabilities are now reported as "Local to Pod" ( <pod name> )
Event  can now implement 'location()' method that return string representing  events logical location.
In events chain, the 'newest' event available location method will be used. This is because we compose (chain) events.
Core changed to support it.
Added 'location()' method to relevant event classes.
Reports are now using vulnerability.location() to retrieve location.
2019-03-07 14:45:26 +02:00
Liz RiceandGitHub f2b3573bee Add python 3 2019-03-06 20:36:43 +00:00
Liz RiceandGitHub d66180d7cc Add build status badge 2019-03-05 12:33:16 +00:00
Liz RiceandGitHub c44d6874dc Update travis for python 3 as well as python 2
Now that we have #95
2019-03-05 12:30:22 +00:00
Liz RiceandGitHub fcee9d54ee Merge pull request #95 from westonsteimel/python3
support python3
2019-03-05 12:28:59 +00:00
Liz Rice 991214f8db Remove temp debugging 2019-03-05 10:05:01 +00:00
Weston Steimel 71f52c0d2c add future as requirement
Signed-off-by: Weston Steimel <weston.steimel@gmail.com>
2019-03-04 21:38:05 +00:00
Weston Steimel 45d32be212 support for python3
Signed-off-by: Weston Steimel <weston.steimel@gmail.com>
2019-03-04 21:37:59 +00:00
Liz RiceandGitHub 5b8fd07714 Merge pull request #100 from idanr1986/cve_hunter
changed cve details
2019-03-04 15:40:12 +00:00
Idan Revivo b7222d26e7 cve info change 2019-03-04 17:05:17 +02:00
Liz Rice 0f3eac9a12 Didn’t end up basing the Active Hunter on the passive one 2019-03-04 14:07:53 +00:00
Liz Rice 7296805d58 Only create per-namespace objects if we have found namespaces 2019-03-04 13:47:49 +00:00
Liz Rice 93ab052e23 Tidy up a bit more 2019-03-04 13:06:23 +00:00
Liz Rice e77f5fdcc8 Show in the report whether access was via service token or not 2019-03-04 12:35:57 +00:00