 oriagmon
|
9ae772eeaa
|
Improved todo, Added all api calls to API server, we have to test & modify them (when needed)
|
2018-11-07 22:32:18 +02:00 |
|
|
oriagmon
|
47aa4c40bb
|
minor Typo
|
2018-11-07 22:32:18 +02:00 |
|
|
oriagmon
|
16a6590f5e
|
Added all the rest of the api calls to the API server and specified algorithm in words
|
2018-11-07 22:32:18 +02:00 |
|
|
oriagmon
|
d1c59fb982
|
I didn't Finish that hunter yet ( a todo is detailed on my Trello).
|
2018-11-07 22:32:18 +02:00 |
|
|
oriagmon
|
1c324a3f2a
|
Finish that hunter (detailed on my Trello).
|
2018-11-07 22:32:18 +02:00 |
|
|
oriagmon
|
b95feebcba
|
Added a lot of active hunters, using different API Server methods to publish all relevant events from a compromised pod
|
2018-11-07 22:32:18 +02:00 |
|
|
oriagmon
|
eaa0d8e8e0
|
Added two hunters attempting to exploit authorized pod RBAC configurations
|
2018-11-07 22:32:17 +02:00 |
|
|
oriagmon
|
5a790b1ece
|
Listen on port 443 as well now.
|
2018-11-07 22:32:17 +02:00 |
|
 ori.agmon
|
359b766e17
|
Fixed PR comment: Added proper exception handling.
Added logging for this hunter.
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
a3b80dc92d
|
Improved vulnerability description for this hunter
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
a3a7e33f9c
|
Minor changes-> removed unused imports & small fixes
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
2930167d78
|
Added apiserver hunter, would attempt to get the service account token and access the server api with it
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
369e70ad6e
|
Fixed the PR comments :-)
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
72dfbdc34d
|
Fixed the PR comments :-)
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
c200fcc416
|
Improved unauthorized access false positive on edge case (where user is running using https & 127.0.0.1 & needed certificates)
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
a67e6a57c3
|
Added evidence to the no auth event & tested it on a vulnerable remote cluster (and it worked!)
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
5d6eea72f7
|
Updated the todos list
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
5dbcdcedb7
|
Added categories to all vulnerabilities
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
2da03d812d
|
Fixed a small bug in the active hunter
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
0299800cd2
|
Fixed a small bug in the active hunter
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
730b19547b
|
Fixed a small bug in the active hunter & passive hunter
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
1d7120bfe1
|
Updated the TODOS list (Only 2 left!)
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
5e42246773
|
Added some evidences to events & deleted unused code
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
40213db654
|
I've Split the etcd hunters to hunting & discovery dirs
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
9148d5273b
|
Added init method to the etcd active hunter
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
0a4c80cb09
|
Solved some exception bugs & did some refactoring to code & Added event & splited active & passive hunter
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
e764d5f21b
|
Solved some exception bugs & did some refactoring to code & Added event
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
09c076c6a5
|
Solved some exception bugs & did some refactoring to code
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
10e9a63e50
|
Added timeout for each request.
Finished with some of the TODOS tasks (added logs).
Added another TODO task for this branch.
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
bca2f3614c
|
Edited some of the etcd checking & added 2379 port checking
|
2018-11-07 22:32:17 +02:00 |
|
|
ori.agmon
|
242260b03e
|
Added some remote access to etcd checks.
|
2018-11-07 22:32:17 +02:00 |
|
 Liz Rice
|
bb52711c41
|
Merge pull request #42 from aquasecurity/updateDocForPythonPath
Update README.md
|
2018-11-06 10:33:42 +00:00 |
|
|
Liz Rice
|
6d73a2cde3
|
Update README.md
|
2018-11-06 10:32:44 +00:00 |
|
|
Liz Rice
|
aca2784598
|
Merge pull request #53 from aquasecurity/access-secrets-hunter
Access secrets hunter
|
2018-11-06 10:30:17 +00:00 |
|
|
Liz Rice
|
1171c8ae20
|
Merge branch 'master' into access-secrets-hunter
|
2018-11-06 09:08:14 +00:00 |
|
|
Liz Rice
|
df5d0bc3f6
|
Merge pull request #58 from aquasecurity/solve-multi-threading-bug
Solve multi threading bug
|
2018-10-22 13:34:26 +01:00 |
|
|
oriagmon
|
951efab5e0
|
Fixed PR comments.
|
2018-10-22 11:39:53 +03:00 |
|
|
Ori Agmon
|
fc0960d3bb
|
Merge branch 'master' into access-secrets-hunter
|
2018-10-21 12:04:59 +03:00 |
|
|
oriagmon
|
590ba9d3f2
|
Solved spacing conflict
|
2018-10-21 11:57:58 +03:00 |
|
|
oriagmon
|
812edafe80
|
Solved spacing conflict
|
2018-10-21 11:51:44 +03:00 |
|
|
oriagmon
|
3b0d2233fd
|
Solved spacing conflict
|
2018-10-21 11:50:42 +03:00 |
|
|
oriagmon
|
a7e4ebf369
|
Solved spacing conflict
|
2018-10-21 11:47:15 +03:00 |
|
|
oriagmon
|
54da07a73e
|
Cleaned this branch to contain only updated secrets branch without locking
|
2018-10-21 11:23:30 +03:00 |
|
|
oriagmon
|
76692a36d7
|
Finished with the left of the PR comments.
|
2018-10-21 10:53:50 +03:00 |
|
|
oriagmon
|
7e324c5374
|
Fixed safe to change PR comments. the next fixes of these PR would need to be tested
|
2018-10-21 10:47:48 +03:00 |
|
|
Liz Rice
|
1eb422c0a6
|
Merge pull request #52 from aquasecurity/checkEtcdHunter
Etcd hunter
|
2018-10-17 18:34:33 +01:00 |
|
|
oriagmon
|
6602821a80
|
DONE
|
2018-10-17 20:21:27 +03:00 |
|
|
oriagmon
|
a109dd956b
|
found another variable I think should be locked
|
2018-10-17 17:54:11 +03:00 |
|
|
oriagmon
|
8ede3b4f74
|
return self.version_evidence --> return self.keys_evidence
|
2018-10-17 15:54:51 +03:00 |
|
|
oriagmon
|
26f3878f7c
|
Using stricter locking "policy"
|
2018-10-17 15:28:18 +03:00 |
|