 oriagmon
|
d53cb9ca38
|
Minor: Forgot to add more accurate event categories
|
2018-11-07 22:32:20 +02:00 |
|
|
oriagmon
|
f9aa8254fd
|
Finished & Tested:-)
|
2018-11-07 22:32:20 +02:00 |
|
|
oriagmon
|
cd8a95e3f8
|
Added required class event for delete namespace
|
2018-11-07 22:32:20 +02:00 |
|
|
oriagmon
|
5170686d1b
|
Removed testing code, improved comments.
This hunter was fully tested and it fully worked.
I have added another method to delete a namespace, once I test it it would be ready for a PR!
|
2018-11-07 22:32:20 +02:00 |
|
|
oriagmon
|
08ff6c3bfe
|
Improved evidences
|
2018-11-07 22:32:20 +02:00 |
|
|
oriagmon
|
376167b047
|
Fixed patching methods
|
2018-11-07 22:32:20 +02:00 |
|
|
oriagmon
|
32322d68b0
|
Fixed roles & cluster roles creation & deletion bug.
just have to fixed the patching api calls now
|
2018-11-07 22:32:20 +02:00 |
|
|
oriagmon
|
81e54b334d
|
Fixed roles & cluster roles creation & deletion bug.
just have to fixed the patching api calls now :D
|
2018-11-07 22:32:20 +02:00 |
|
|
oriagmon
|
8dae387e6b
|
Commented the pod api calls, so it would be easier to test
|
2018-11-07 22:32:20 +02:00 |
|
|
oriagmon
|
75a813ce6f
|
Only the pod patching and the roles & cluster roles api calls are left to test!!
|
2018-11-07 22:32:20 +02:00 |
|
|
oriagmon
|
38320d2190
|
WIP, Got to go :)
Only have to finish testing the *active hunters'
|
2018-11-07 22:32:20 +02:00 |
|
|
oriagmon
|
3ffe2a93d2
|
Fixed formated json string
|
2018-11-07 22:32:20 +02:00 |
|
|
oriagmon
|
6dcc9cd381
|
Generated random string as resource names
|
2018-11-07 22:32:20 +02:00 |
|
|
oriagmon
|
2a4725cca4
|
Some triggering fixes & active hunter bugs
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
2090e6c1c6
|
Remove irrelevant comments
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
b5b6491db5
|
Removed unused variables
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
5d9c9aec71
|
Passive hunters are finished! just have to test them on non admin pod too
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
443b9202fe
|
Parsed response str to dictionary on all methods, working on numbers values too now
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
903c8e4d11
|
Parsed response str to dictionary
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
aa04c71b94
|
Fixed some minor errors in passive hunter & used more of the active hunter methods
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
1d62bcd1c7
|
Finish Implemented hunters & moved some active hunters to passive hunter.
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
f980f088f2
|
WIP, time to fix PR on another branch
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
cd258bd321
|
WIP, but have to go now:
(1)Tested manually most of the methods! (2) Published most of events. (3) Added TODOs.
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
29c8d8e942
|
Added corresponding events & descriptions for the new methods
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
c5bcb56707
|
Manually tested requests and changed some methods!
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
ebd9b7fcd5
|
Improved todo, Added all api calls to API server, we have to test & modify them (when needed)
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
936e93d5f2
|
minor Typo
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
352c33cbb8
|
Added all the rest of the api calls to the API server and specified algorithm in words
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
101fee6d9a
|
I didn't Finish that hunter yet ( a todo is detailed on my Trello).
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
82d4af5ba3
|
Finish that hunter (detailed on my Trello).
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
45b804be94
|
Added a lot of active hunters, using different API Server methods to publish all relevant events from a compromised pod
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
c336a2a23e
|
Added two hunters attempting to exploit authorized pod RBAC configurations
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
93d9db658e
|
Listen on port 443 as well now.
|
2018-11-07 22:32:19 +02:00 |
|
 ori.agmon
|
7a006ef51e
|
Fixed PR comment: Added proper exception handling.
Added logging for this hunter.
|
2018-11-07 22:32:19 +02:00 |
|
|
ori.agmon
|
ad5a4eba86
|
Improved vulnerability description for this hunter
|
2018-11-07 22:32:19 +02:00 |
|
|
ori.agmon
|
d4d1751d3e
|
Minor changes-> removed unused imports & small fixes
|
2018-11-07 22:32:19 +02:00 |
|
|
ori.agmon
|
b74225e027
|
Added apiserver hunter, would attempt to get the service account token and access the server api with it
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
458381fb2d
|
Fixed more PR comment (ascii encode)
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
2a3764e097
|
Minor
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
14db8edd39
|
Finished with Most of the pr fixes
|
2018-11-07 22:32:19 +02:00 |
|
 Liz Rice
|
7502b10005
|
Typos & text changes
|
2018-11-07 22:32:19 +02:00 |
|
|
Liz Rice
|
1762b2fbd4
|
Minor typo
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
2264754908
|
Added & Tested Create A Privileged Pod method
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
03c21fe62f
|
Minor: Forgot to add more accurate event categories
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
ab3d429672
|
Finished & Tested:-)
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
5e1799f294
|
Added required class event for delete namespace
|
2018-11-07 22:32:19 +02:00 |
|
|
oriagmon
|
da02a5df9e
|
Removed testing code, improved comments.
This hunter was fully tested and it fully worked.
I have added another method to delete a namespace, once I test it it would be ready for a PR!
|
2018-11-07 22:32:18 +02:00 |
|
|
oriagmon
|
33544c2e84
|
Improved evidences
|
2018-11-07 22:32:18 +02:00 |
|
|
oriagmon
|
204650b8eb
|
Fixed patching methods
|
2018-11-07 22:32:18 +02:00 |
|
|
oriagmon
|
5c8ed31b50
|
Fixed roles & cluster roles creation & deletion bug.
just have to fixed the patching api calls now
|
2018-11-07 22:32:18 +02:00 |
|