github/kube-hunter
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-hunter.git synced 2026-08-23 22:26:23 +00:00
Code Issues Packages Projects Releases Wiki Activity
696 Commits 55 Branches 19 Tags
feature/immersed
Commit Graph
696 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Daniel Sagi 40ebaa6259 fixed bug for only one run 2021-06-17 19:42:35 +00:00
Daniel Sagi c2d0efc6cd fixed kube-hunter logo 2021-06-17 19:34:26 +00:00
Daniel Sagi 348a288411 added auth store selection, and an impersonating: comment on top of the prompt to indicate the current auth data 2021-06-17 19:26:18 +00:00
Daniel Sagi 12f0d17c3a added eveything hunt option under hunt subconsole 2021-06-17 19:06:53 +00:00
Daniel Sagi 23b048c6d2 completed implementation for delete and create methods in the auth subconsole 2021-06-17 17:21:26 +00:00
Daniel Sagi 1aab95085a removed imports from manager 2021-06-17 16:28:20 +00:00
Daniel Sagi f706802eb9 improved ipdb interactive option 2021-06-17 16:27:42 +00:00
Daniel Sagi 17fd10120e added new base class for general implementation of CMD class 2021-06-17 16:20:41 +00:00
Daniel Sagi 2400ab5bb1 fixed imports 2021-06-17 15:15:36 +00:00
Daniel Sagi f6e43e2bbb fixed adding __str__ to cloud type 2021-06-17 15:11:19 +00:00
Daniel Sagi f7e73fe642 changed sub_command to sub_console 2021-06-17 15:10:58 +00:00
Daniel Sagi 6a8568173e removed old env.py file 2021-06-17 15:09:04 +00:00
Daniel Sagi d5efef45e2 fixed bug in init of cmd classes 2021-06-17 15:08:40 +00:00
Daniel Sagi 46b7f9f5d9 added missing env module, and fixed auth subconsole to use self.env 2021-06-17 15:06:13 +00:00
Daniel Sagi 2f6badd32f changed module hirerarchy, fixed exit problem and changed to using cmd2 2021-06-17 14:40:18 +00:00
Daniel Sagi 6a4e6040f7 merged main into feature 2021-06-17 10:25:05 +00:00
Daniel 6a3c462fde added whereami command and auth subcmd to control auth database. whereami stats the local files and updates to local auth store 2021-06-10 20:36:13 +00:00
Daniel f1d4defcb6 added pod local discovery 2021-06-10 19:12:38 +00:00
Daniel Sagi 7601692d42 fixed import bug 2021-06-10 19:39:36 +03:00
Daniel Sagi 7fe047e512 Merge branch 'main' into feature/immersed 2021-06-05 16:28:51 +03:00
Mikolaj PawlikowskiandMikolaj Pawlikowski 6689005544 K8s autodiscovery (#453) 
* Add a new dependency on Kubernetes package

* Add and store a new flag about automatic nodes discovery from a pod

* Implement the listing of nodes

* Add tests to cover the k8s node listing

* Fix the k8s listing test to ensure the load incluster function is actually called

* Add more help to the k8s node discovery flags, and cross-reference them.

* Add a note on the Kubernetes auto-discovery in the main README file

* Move the kubernetes discovery from conf to modules/discovery

* When running with --pods, run the Kubernetes auto discovery

* Also mention that the auto discovery is always on when using --pod

Co-authored-by: Mikolaj Pawlikowski <mpawlikowsk1@bloomberg.net>
v0.5.2 		2021-06-05 15:53:07 +03:00
danielsagi 0b90e0e43d Bugfix - Aws metadata api discovery (#455) 
* fixed aws metadata bug

* added new black reformatting
v0.5.1 		2021-05-27 21:41:43 +03:00
Daniel Sagi d6d46527cd started adding nested cmd for discovery 2021-04-30 16:13:29 +03:00
Daniel Sagi 2fac45e42b removed test cmds 2021-04-30 15:06:22 +03:00
Daniel Sagi 5b36c9c06a started adding immersed console feature, implemented environment settings behaviour on prompt cli 2021-04-30 15:05:33 +03:00
danielsagiandRaito Bezarius 65eefed721 Multiple Subscriptions Mechanism (#448) 
* Add multiple subscription mechanism

* PR: address comments

* improved implementation, solved a couple of bugs, added documentation to almost the whole backend process

* added corresponding tests to the new method of the multiple subscription

* fixed linting issue

* fixed linting #2

Co-authored-by: Raito Bezarius <masterancpp@gmail.com>
 2021-04-25 19:27:41 +03:00
danielsagi 599e9967e3 added pypi publish workflow (#450) v0.5.0 2021-04-23 14:37:31 +03:00
Tommy McCormick 5745f4a32b Add discovery for AWS metadata (#447) 2021-04-21 20:57:17 +03:00
danielsagi 1a26653007 Added Advanced Usage section to the readme, documenting azure quick scanning (#441) 2021-04-08 19:20:09 +03:00
miwithro cdd9f9d432 Update KHV003.md (#439) 2021-03-16 17:17:55 +02:00
Simarpreet Singh 99678f3cac deps: Update github pages dependencies (#431) 
Signed-off-by: Simarpreet Singh <simar@linux.com>
 2021-01-17 16:03:04 +02:00
danielsagi cdbc3dc12b Bug Fix: False Negative On AKS Hunting (#420) 
* removed false negative in AzureSpnHunter when /run is disabled

* changed to use direct imported class

* fixed multiple bugs in azure spn hunting, and improved efficency

* fixed bug in cloud identification. TODO: remove the outsourcing for cloud provider

* removed unused config variable

* fixed tests to use already parsed pods as the given previous event has changed
v0.4.1 		2021-01-07 19:46:00 +02:00
Carol ValenciaandCarol Valencia d208b43532 feat: github actions to publish ecr and docker (#429) 
* feat: github actions to publish ecr and docker

* test: github actions to publish ecr and docker

* chore: yaml lint github actions

* chore: yaml lint github actions

* fix: secrets envs for github action

* chore: build and push action for ecr/docker

Co-authored-by: Carol Valencia <krol3@users.noreply.github.com>
 2020-12-26 21:31:53 +02:00
Itay Shakury 42250d9f62 move from master branch to main (#427) 2020-12-17 16:16:16 +02:00
danielsagiandLiz Rice d94d86a4c1 Created a Vulnerability Disclosure README (#423) 
* Created a vulnerability disclosure readme

* Update SECURITY.md

Co-authored-by: Liz Rice <liz@lizrice.com>

* Update SECURITY.md

Co-authored-by: Liz Rice <liz@lizrice.com>

* Update SECURITY.md

Co-authored-by: Liz Rice <liz@lizrice.com>

Co-authored-by: Liz Rice <liz@lizrice.com>
 2020-12-17 15:16:28 +02:00
danielsagi a1c2c3ee3e Updated kramdown (#424) 
Updated kramdown to a newer patched version, the old version was not patched to CVE-2020-14001
 2020-12-17 11:50:02 +00:00
danielsagi 6aeee7f49d Improvements and bug fixed in Release workflow (#425) 
* changed ubuntu to an older version, for compatibility reasons with glibc on pyinstaller steps and added a step to parse the release tag

* removed parsing of release tag

* changed flow name

* removed 'release' from the release name
 2020-12-08 21:46:24 +02:00
danielsagi f95df8172b added a release workflow for a linux binary (#421) 2020-12-04 13:45:03 +02:00
danielsagi a3ad928f29 Bug Fix: Pyinstaller prettytable error (#419) 
* added specific problematic hooks folder for when compiling with pyinstaller. added a fix for prettytable import

* fixed typo

* lint fix
 2020-12-04 13:43:37 +02:00
danielsagi 22d6676e08 Removed Travis and Greetings workflows (#415) 
* removed greetings workflow, and travis

* Update the build status badge to point to Github Actions
 2020-12-04 13:42:38 +02:00
danielsagi b9e0ef30e8 Removed Old Dependency For CAP_NET_RAW (#416) 
* removed old dependency for cap_net_raw, by stop usage of tracerouting when running as a pod

* removed unused imports
 2020-12-03 17:11:18 +02:00
RDxR10anddanielsagi 693d668d0a Update apiserver.py (#397) 
* Update apiserver.py

Added description of KHV007

* fixed linting issues

Co-authored-by: danielsagi <danielsagi2009@gmail.com>
 2020-11-28 19:41:06 +02:00
RDxR10anddanielsagi 2e4684658f Update certificates.py (#398) 
* Update certificates.py

Regex expression update for email

* fixed linting issues

Co-authored-by: danielsagi <danielsagi2009@gmail.com>
 2020-11-28 18:55:14 +02:00
Hugo van Kemenadeanddanielsagi f5e8b14818 Migrate tests to GitHub Actions (#395) (#399) 
Co-authored-by: danielsagi <danielsagi2009@gmail.com>
 2020-11-28 17:34:30 +02:00
danielsagiandLiz Rice 05094a9415 Fix lint comments (#414) 
* removed unused get query to port forward

* moved existing code to comments

Co-authored-by: Liz Rice <liz@lizrice.com>
 2020-11-28 17:16:57 +02:00
danielsagi 8acedf2e7d updated screenshot of aqua's site (#412) 2020-11-27 16:04:38 +02:00
danielsagi 14ca1b8bce Fixed false positive on test_run_handler (#411) 
* fixed wrong check on test run handler

* changed method of testing to be using 404 with real post method
v0.4.0 		2020-11-19 17:41:33 +02:00
danielsagi 5a578fd8ab More intuitive message when ProveSystemLogs fails (#409) 
* fixed wrong message for when proving audit logs

* fixed linting
 2020-11-18 11:35:13 +02:00
danielsagi bf7023d01c Added docs for exposed pods (#407) 
* added doc _kb for exposed pods

* correlated the new khv to the Exposed pods vulnerability

* fixed linting
 2020-11-17 15:22:06 +02:00
danielsagi d7168af7d5 Change KB links to avd (#406) 
* changed link to point to avd

* changed kb_links to be on base report module. and updated to point to avd. now json output returns the full avd url to the vulnerability

* switched to adding a new avd_reference instead of changed the VID

* added newline to fix linting
 2020-11-17 14:03:18 +02:00