github/kube-hunter
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-hunter.git synced 2026-08-23 22:26:23 +00:00
Code Issues Packages Projects Releases Wiki Activity
681 Commits 55 Branches 19 Tags
bugfix/fix_github_actions
Commit Graph
681 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
danielsagi b2d2f5a01a New kubectl CVE hunter, detecting CVE-2019-11246 and CVE_2019_1002101 (#141) 
* added a new hunter for CVE-2019-11246

* added KubectlClient component

* overriden location function on event to display a 'local machine' location

* added clarification about kubectl version --client operation

* Fix tiny typo

It reads better without the comma

* removed unnecessary debug message

* added CVE hunter for kubectl to allow more CVE checking.
 2019-06-27 09:51:18 +01:00
danielsagi f360c541ff Minor improve of task counting of queue (#139) 
* changed way of task handler to be more safe. also added info about cases when one task is hanging

* removed queue_lock
 2019-06-27 09:36:31 +01:00
Liz Rice b5bf168938 Merge pull request #140 from danielsagi/show_vulnerabilities_without_services 
Added printing vulnerabilities in case of no services on PlainReporter
 2019-06-25 12:55:34 +01:00
Daniel Sagi b7bcdd09cf better way of treating the printing, concatenating output 2019-06-24 22:42:03 +03:00
Daniel Sagi 1baca77754 Up until now if services were not discovered, vulnerabilities will not have shown. we want to show the, in any case. 2019-06-24 20:00:28 +03:00
Liz Rice f9c001ddea Merge pull request #137 from aquasecurity/add_exception_messages 
More detailed explanation about exceptions
 2019-06-13 06:01:26 -07:00
Daniel Sagi 50ea9a2405 added more detailed explanation about exceptions in debug 2019-06-12 17:43:16 +03:00
danielsagi e04e84cc16 Merge pull request #135 from aquasecurity/fix_get_random_pod 
Fixed not finding open debug handlers
 2019-06-11 18:11:12 +03:00
danielsagi 30121b5010 Merge branch 'master' into fix_get_random_pod 2019-06-11 17:53:13 +03:00
danielsagi c338aae1d6 Merge pull request #117 from aquasecurity/insecure_port 
Insecure port for api server
 2019-06-11 17:49:59 +03:00
danielsagi ec3aca9547 Merge branch 'master' into insecure_port 2019-06-11 17:43:14 +03:00
Daniel Sagi faf1db3d16 cleaned files to match master branch updates, also removed change of ExposedRunHandler evidence handling 2019-06-11 17:40:44 +03:00
Daniel Sagi 2168180ffb fixed issue with get_random_pod method, .next attribute on generator is deprecated in python3 2019-06-11 11:29:39 +03:00
danielsagi 079062573e Merge pull request #133 from nshauli/add_counter_to_privileged_container_evidence 
Add evidence counter to privileged container vulnerability
 2019-06-05 11:56:48 +03:00
nshauli ac77c67ddd Add evidence counter to privileged container vulnerability 2019-06-05 11:48:25 +03:00
danielsagi 0f4ddc9987 Merge pull request #132 from aquasecurity/add_environment_markers 
changed enum34 to be installed only under python version 3.4
 2019-06-03 20:45:03 +03:00
Daniel Sagi 9204d34244 changed enum34 to be installed only under python version 3.4 2019-06-03 20:16:39 +03:00
danielsagi 9629292ef8 Merge pull request #130 from nshauli/add_hunter_name_to_vulnerability 
Add hunter name to each event and each reported vulnerability
 2019-06-03 16:26:56 +03:00
nshauli f5c54428f8 Add hunter name to each event and to each vulnrability in json and yaml report 2019-06-03 16:17:33 +03:00
Liz Rice 1143b89332 Merge branch 'master' into insecure_port 2019-05-30 23:26:16 +01:00
Liz Rice b60cdf2043 Merge pull request #128 from DrMurx/more_secure_cloudip_detection 
Access cloud IP detection service via HTTPS
 2019-05-30 23:24:31 +01:00
Liz Rice 8fad9dd2ac Merge branch 'master' into more_secure_cloudip_detection 2019-05-30 23:20:41 +01:00
danielsagi c6673869d7 Merge pull request #129 from aquasecurity/add_enum_to_requirements 
added enum34 to requirements.txt
 2019-05-25 20:43:55 +03:00
Daniel Sagi 55ed8d0a80 added enum34 to requirements.txt 2019-05-25 20:00:55 +03:00
Jan Kunzmann 0f3670dff5 Access cloud IP detection service via HTTPS 2019-05-23 13:03:18 +02:00
danielsagi e69e591fab Merge pull request #125 from aquarnd/hunter_statistics_should_count_vulnerabilities_only 
1. Change hunter statistics to count vulnerabilities only.
 2019-05-21 19:12:13 +03:00
nshauli ac7027dab6 1. Change hunter statistics to count vulnerabilities only. 
2. Add --statistics flag support.
3. Show hunter statistics only if --statistics was set.
4. Few infrastructure improvements.
 2019-05-20 21:32:52 +03:00
Liz Rice d7014fd06d Merge pull request #121 from tomek-bt/update-readme-for-non-ssh 
Update README to reference non-SSH URL
 2019-05-18 09:44:44 +01:00
Tomek Rabczak e536f53b88 Update README to reference non-SSH URL 2019-05-17 17:44:42 +00:00
Liz Rice f7eccca55d Merge pull request #119 from aquasecurity/security-fix 
CVE-2019-11324
 2019-05-14 15:23:44 +01:00
Liz Rice d6f76dc295 CVE-2019-11324 2019-05-14 15:15:11 +01:00
Liz Rice 229ff40a01 Fix bad merge 
And a typo while I'm here
 2019-05-14 14:07:33 +01:00
Liz Rice 7d038f50dc Merge branch 'master' into insecure_port 2019-05-14 12:00:51 +01:00
Liz Rice c860406075 Merge pull request #116 from aquarnd/add_suppport_for_hunters_list 
Add support for hunters list as part of the reports.
 2019-05-14 11:55:40 +01:00
nshauli b4df6b5298 Add support for hunters list as part of the reports. 
Each reported hunter includes name, description and number of events.
Add severity field to each vulnerability report.
 2019-05-14 12:44:30 +03:00
Liz Rice 50dfbd0daa Update requirements.txt 2019-05-13 13:52:51 +01:00
Liz Rice 5cf68a318f Tests for insecure port access 2019-05-13 13:18:03 +01:00
Liz Rice fd5ed8a166 .gitignore additions 2019-05-13 12:26:22 +01:00
Liz Rice 1db39fd966 Include evidence on exposed run handler 2019-05-13 12:24:28 +01:00
Liz Rice bfb14e229a Combine two debug messages, for clarity 2019-05-13 12:23:53 +01:00
Liz Rice da832df36d Test for insecure port being open on port 8080 2019-05-13 12:23:23 +01:00
nshauli f0160e2eba Update imports and dependencies for creating single application of kube-hunter using pyinstaller (#114) 2019-04-16 15:37:34 +03:00
Liz Rice 0707954efb Add note that current container is out of date 2019-03-30 08:40:14 +01:00
Liz Rice 35e607f966 Merge pull request #101 from aquasecurity/api-server-hunt-improvements 
API server hunt improvements
 2019-03-20 12:30:48 +00:00
Liz Rice 4051fa708d Remove unused class 2019-03-20 11:57:46 +00:00
Liz Rice fa99b4edd1 Remove unused class 2019-03-20 11:51:24 +00:00
Liz Rice f10632f47e Merge branch 'master' into api-server-hunt-improvements 2019-03-18 17:58:12 +00:00
Liz Rice 33ce1461bb Merge pull request #104 from mcherny/fix-issue-99 
Fixes #99 - pod local vulnerabilities are now reported as "Local to Pod" ( <pod name> )
 2019-03-18 17:53:30 +00:00
Liz Rice 71903ba942 Merge branch 'master' into fix-issue-99 2019-03-18 17:50:06 +00:00
Liz Rice 4daaf53f89 Merge pull request #105 from mcherny/fix-issue-98 
Fix #98 - cvehunter now using service token discovered in hosts.py
 2019-03-18 17:48:39 +00:00