daniel_sagi
05bea207fd
bug fix: default secure value for services changed from False to True
2018-07-04 12:36:41 +03:00
daniel_sagi
23c03afc02
added interactive choosing of scanning options
2018-07-02 16:20:14 +03:00
daniel_sagi
464e7aad1f
Added exception handling and improved help
2018-06-21 13:45:19 +03:00
daniel_sagi
8c6712f378
1. Changed report methods and renamed "log" module to "", added another report generation in a new json format
...
2. started to add the --token option to send the finished report.
3. changed a bit of kubelet vulnerability output architecture to match out conventions.
4. added healthz check on kubelets
2018-06-20 12:09:40 +03:00
daniel_sagi
2b690056b0
Fixed type in privileged, also moved Components to core.types
2018-06-19 11:07:18 +03:00
daniel_sagi
dc830b1281
changed README
2018-06-18 16:42:50 +03:00
daniel_sagi
808ccdb1b5
added src README
2018-06-18 16:26:49 +03:00
daniel_sagi
fac667552e
added cidr option, also added a while true when running on a pod, to halt for seeing results before restart
2018-06-17 19:01:23 +03:00
daniel_sagi
f3b9b5200f
added requirements.txt
2018-06-12 16:55:22 +03:00
daniel_sagi
73a4e83781
Added checks on api responses before json.loads, added a quick scanning option, to scan part of the subnet
2018-06-12 14:30:28 +03:00
daniel_sagi
c52e684272
removed passing of active attribute to results printing
2018-06-12 13:16:35 +03:00
daniel_sagi
e4c9beb653
added prove of running pods
2018-06-12 12:57:29 +03:00
daniel_sagi
3f174364f7
Added cloud identifiering for each type of host scan, using azurespeed. Now AzuerSpn hunting will be triggered only if the host is an azure cluster. using predicate, and the new 'cloud' attribute
2018-06-12 12:10:59 +03:00
daniel_sagi
973c2a25a0
changed output results table format, added AzureMetadata vulnerability on discovery
2018-06-11 20:02:25 +03:00
daniel_sagi
7e939b4544
finished aks spn hunting
2018-06-11 18:44:54 +03:00
daniel_sagi
548ae7e486
changed evidence of priviledged containers, also added casting to str in reporter
2018-06-11 18:28:01 +03:00
daniel_sagi
9bb835edd3
added azure spn subscription hunting
2018-06-11 18:26:58 +03:00
daniel_sagi
838be65967
Added proves for vulnerabilities, added 'evidence' field for every vulnerability to be filled be provers(mostly ActiveHunters)
2018-06-11 18:01:54 +03:00
daniel_sagi
75393da91a
simplified kubelet open handlers hunting and types
2018-06-11 14:26:09 +03:00
daniel_sagi
01c4aac105
Active hunting is now available by inheriting from ActiveHunter. the hunter wil subscribe only if the --active flag was set.
...
1. Removed scanning configuration from events, from now on, scanning config is accessed from the main module
2. Moved core types to a "toplevel" file
2018-06-11 12:39:11 +03:00
daniel_sagi
a2e37927bd
changed directory tree of all modules and packages, for easing on future implementations and extensions
2018-06-10 20:09:09 +03:00
