daniel_sagi
94b2bcc76d
Merge branch 'master' of bitbucket.org:scalock/kube-hunter
2018-07-15 13:18:23 +03:00
daniel_sagi
0619eb06e2
changed existing vulnerabilities to specify categories, and changed a bit of their description
2018-07-15 13:17:42 +03:00
daniel_sagi
d0a7163221
advanced discovery of proxy
2018-07-15 13:15:59 +03:00
daniel_sagi
a89f8d1f29
added categories for vulnerabilities. From now on, all vulnerabilities should be classified with a category
2018-07-15 13:14:48 +03:00
daniel_sagi
94790be334
added execption handling wraping on all hooks on execution
2018-07-15 13:12:48 +03:00
daniel_sagi
494ae8b92f
changed timestamp to be in milliseconds
2018-07-15 13:11:49 +03:00
daniel_sagi
1b1322796e
changed printing order of table and report url
2018-07-10 14:12:16 +03:00
Liz Rice
0d5698b1fc
Merged in liz2 (pull request #3 )
...
Language tidying in the README
2018-07-08 15:41:02 +00:00
daniel_sagi
e16bc40fb7
minor services description improvements
2018-07-04 15:08:51 +03:00
Liz Rice
0b05ff6aa6
Little typos
2018-07-04 11:23:04 +01:00
Liz Rice
4647f7b454
Language tidying in the README
2018-07-04 11:09:02 +01:00
daniel_sagi
05bea207fd
bug fix: default secure value for services changed from False to True
2018-07-04 12:36:41 +03:00
daniel_sagi
43c27b611a
Merge branch 'report_token_feature' of bitbucket.org:scalock/kube-hunter
2018-07-04 11:54:58 +03:00
daniel_sagi
16537e1ff6
changed a bit of report uploading process
2018-07-04 11:36:32 +03:00
Liz Rice
c2d2d56a32
Merged in liz (pull request #1 )
...
Minor doc corrections
2018-07-04 08:15:36 +00:00
Liz Rice
76bd6d456e
Minor English corrections in the README
2018-07-03 17:10:09 +01:00
Liz Rice
e3a74b577e
Improve help message
2018-07-03 17:00:19 +01:00
daniel_sagi
23c03afc02
added interactive choosing of scanning options
2018-07-02 16:20:14 +03:00
daniel_sagi
03760724ac
+ added report url handling on end of run, when specifiyng token
2018-06-27 14:13:49 +03:00
daniel_sagi
aa25e83a99
moved report generation functions to inner functions, also added token flag, and the lambda url sending function
2018-06-21 19:47:10 +03:00
daniel_sagi
464e7aad1f
Added exception handling and improved help
2018-06-21 13:45:19 +03:00
daniel_sagi
8c6712f378
1. Changed report methods and renamed "log" module to "", added another report generation in a new json format
...
2. started to add the --token option to send the finished report.
3. changed a bit of kubelet vulnerability output architecture to match out conventions.
4. added healthz check on kubelets
2018-06-20 12:09:40 +03:00
daniel_sagi
2b690056b0
Fixed type in privileged, also moved Components to core.types
2018-06-19 11:07:18 +03:00
daniel_sagi
dc830b1281
changed README
2018-06-18 16:42:50 +03:00
daniel_sagi
b024660f55
added link to developer readme
2018-06-18 16:28:34 +03:00
daniel_sagi
808ccdb1b5
added src README
2018-06-18 16:26:49 +03:00
daniel_sagi
5f05004657
changed README
2018-06-18 10:47:38 +03:00
daniel_sagi
54aa13d1b3
Added mapping option
2018-06-18 10:46:03 +03:00
daniel_sagi
725161cab9
Changed readme
2018-06-17 19:16:59 +03:00
daniel_sagi
5055f9a809
removed dockerignore
2018-06-17 19:15:49 +03:00
daniel_sagi
68e66da62d
Added Readme
2018-06-17 19:13:02 +03:00
daniel_sagi
254b31f90c
chenged requirements back to no specific version of some packages
2018-06-17 19:02:17 +03:00
daniel_sagi
fac667552e
added cidr option, also added a while true when running on a pod, to halt for seeing results before restart
2018-06-17 19:01:23 +03:00
daniel_sagi
1168a068af
updated version packages
2018-06-12 17:13:17 +03:00
daniel_sagi
f3b9b5200f
added requirements.txt
2018-06-12 16:55:22 +03:00
daniel_sagi
c2e089b6a5
removed unnecessary Information imports
2018-06-12 14:31:07 +03:00
daniel_sagi
73a4e83781
Added checks on api responses before json.loads, added a quick scanning option, to scan part of the subnet
2018-06-12 14:30:28 +03:00
daniel_sagi
c52e684272
removed passing of active attribute to results printing
2018-06-12 13:16:35 +03:00
daniel_sagi
e4c9beb653
added prove of running pods
2018-06-12 12:57:29 +03:00
daniel_sagi
ca5c168bef
changed order of rows in result table
2018-06-12 12:57:10 +03:00
daniel_sagi
1102587704
Added joining of queue at the end of the run, kube-hunter now stops alone
2018-06-12 12:40:21 +03:00
daniel_sagi
3f174364f7
Added cloud identifiering for each type of host scan, using azurespeed. Now AzuerSpn hunting will be triggered only if the host is an azure cluster. using predicate, and the new 'cloud' attribute
2018-06-12 12:10:59 +03:00
daniel_sagi
973c2a25a0
changed output results table format, added AzureMetadata vulnerability on discovery
2018-06-11 20:02:25 +03:00
daniel_sagi
7e939b4544
finished aks spn hunting
2018-06-11 18:44:54 +03:00
daniel_sagi
548ae7e486
changed evidence of priviledged containers, also added casting to str in reporter
2018-06-11 18:28:01 +03:00
daniel_sagi
9bb835edd3
added azure spn subscription hunting
2018-06-11 18:26:58 +03:00
daniel_sagi
838be65967
Added proves for vulnerabilities, added 'evidence' field for every vulnerability to be filled be provers(mostly ActiveHunters)
2018-06-11 18:01:54 +03:00
daniel_sagi
75393da91a
simplified kubelet open handlers hunting and types
2018-06-11 14:26:09 +03:00
daniel_sagi
01c4aac105
Active hunting is now available by inheriting from ActiveHunter. the hunter wil subscribe only if the --active flag was set.
...
1. Removed scanning configuration from events, from now on, scanning config is accessed from the main module
2. Moved core types to a "toplevel" file
2018-06-11 12:39:11 +03:00
daniel_sagi
70ea40367b
fixed bug: empty remote option
2018-06-10 20:10:26 +03:00
