github/kube-hunter
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-hunter.git synced 2026-08-23 22:26:23 +00:00
Code Issues Packages Projects Releases Wiki Activity
490 Commits 55 Branches 19 Tags
f0160e2eba5f87fd0c5ffdd1681f6eb71dfeaeaf
Commit Graph
490 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
nshauli f0160e2eba Update imports and dependencies for creating single application of kube-hunter using pyinstaller (#114) 2019-04-16 15:37:34 +03:00
Liz Rice 0707954efb Add note that current container is out of date 2019-03-30 08:40:14 +01:00
Liz Rice 35e607f966 Merge pull request #101 from aquasecurity/api-server-hunt-improvements 
API server hunt improvements
 2019-03-20 12:30:48 +00:00
Liz Rice 4051fa708d Remove unused class 2019-03-20 11:57:46 +00:00
Liz Rice fa99b4edd1 Remove unused class 2019-03-20 11:51:24 +00:00
Liz Rice f10632f47e Merge branch 'master' into api-server-hunt-improvements 2019-03-18 17:58:12 +00:00
Liz Rice 33ce1461bb Merge pull request #104 from mcherny/fix-issue-99 
Fixes #99 - pod local vulnerabilities are now reported as "Local to Pod" ( <pod name> )
 2019-03-18 17:53:30 +00:00
Liz Rice 71903ba942 Merge branch 'master' into fix-issue-99 2019-03-18 17:50:06 +00:00
Liz Rice 4daaf53f89 Merge pull request #105 from mcherny/fix-issue-98 
Fix #98 - cvehunter now using service token discovered in hosts.py
 2019-03-18 17:48:39 +00:00
Liz Rice efa96f5c41 Merge branch 'master' into fix-issue-98 2019-03-18 17:28:31 +00:00
Liz Rice b5b3b6b039 Merge pull request #106 from westonsteimel/update-dockerfile 
python3.7 in dockerfile and travis
 2019-03-13 06:10:10 -07:00
Michael Cherny c59b199a24 Removed unused variable 2019-03-11 00:56:24 +05:30
Liz Rice 1b849947fa Use a predicate and avoid a whole extra event 2019-03-08 16:27:52 +00:00
Weston Steimel 22334c67ad update dockerfile and travis 
* Update docker image to python 3.7.2 and alpine3.9
* Update travis to test python3.7
* Remove part about using python2 in python3-based environment from
README

Signed-off-by: Weston Steimel <weston.steimel@gmail.com>
 2019-03-07 22:36:01 +00:00
Michael Cherny 0c0a68883d Fix #98 - cvehunter now using service token discovered in hosts.py 
We use the token if available.
 2019-03-07 20:44:56 +02:00
Michael Cherny 1cd44832e6 Fixes #99 - pod local vulnerabilities are now reported as "Local to Pod" ( <pod name> ) 
Event  can now implement 'location()' method that return string representing  events logical location.
In events chain, the 'newest' event available location method will be used. This is because we compose (chain) events.
Core changed to support it.
Added 'location()' method to relevant event classes.
Reports are now using vulnerability.location() to retrieve location.
 2019-03-07 14:45:26 +02:00
Liz Rice f2b3573bee Add python 3 2019-03-06 20:36:43 +00:00
Liz Rice d66180d7cc Add build status badge 2019-03-05 12:33:16 +00:00
Liz Rice c44d6874dc Update travis for python 3 as well as python 2 
Now that we have #95
 2019-03-05 12:30:22 +00:00
Liz Rice fcee9d54ee Merge pull request #95 from westonsteimel/python3 
support python3
 2019-03-05 12:28:59 +00:00
Liz Rice 991214f8db Remove temp debugging 2019-03-05 10:05:01 +00:00
Weston Steimel 71f52c0d2c add future as requirement 
Signed-off-by: Weston Steimel <weston.steimel@gmail.com>
 2019-03-04 21:38:05 +00:00
Weston Steimel 45d32be212 support for python3 
Signed-off-by: Weston Steimel <weston.steimel@gmail.com>
 2019-03-04 21:37:59 +00:00
Liz Rice 5b8fd07714 Merge pull request #100 from idanr1986/cve_hunter 
changed cve details
 2019-03-04 15:40:12 +00:00
Idan Revivo b7222d26e7 cve info change 2019-03-04 17:05:17 +02:00
Liz Rice 0f3eac9a12 Didn’t end up basing the Active Hunter on the passive one 2019-03-04 14:07:53 +00:00
Liz Rice 7296805d58 Only create per-namespace objects if we have found namespaces 2019-03-04 13:47:49 +00:00
Liz Rice 93ab052e23 Tidy up a bit more 2019-03-04 13:06:23 +00:00
Liz Rice e77f5fdcc8 Show in the report whether access was via service token or not 2019-03-04 12:35:57 +00:00
Idan Revivo 931e76f64d changed cve details 2019-03-04 13:48:20 +02:00
Liz Rice dd1ed76dc1 Better names, descriptions and tests 
When you query for resources, you get the ones you’re entitled to see - it’s misleading to suggest you’re getting all of them
 2019-03-04 11:43:37 +00:00
Liz Rice 5c22ecdf3c Remove superfluous tests 
There is no need to check for pods or roles under a specific namespace (even the default one) because if we’re allowed to see them we’ll have found them through the wider check for viewing all items
 2019-03-04 11:27:14 +00:00
Liz Rice 5e69d3b307 Better tests for API discovery 2019-03-04 11:23:00 +00:00
Liz Rice a3b4e8243c Merge pull request #97 from idanr1986/cve_hunter 
Cve hunter
 2019-03-04 10:47:55 +00:00
Idan Revivo 5935e0ba96 changed checking all cves 2019-03-04 11:33:39 +02:00
Idan Revivo 1d258f7447 added support for new Vulnerability CVE-2019-1002100 2019-03-03 18:57:12 +02:00
Idan Revivo c06b94f558 moved CVE_2018_1002105 to generic cvehunter 2019-03-03 18:53:35 +02:00
Liz Rice 50078c518e Slightly better names 2019-02-26 19:56:09 +08:00
Liz Rice a3bd1b9ef2 Improvements to the API Server hunters 2019-02-26 19:51:50 +08:00
Liz Rice 2f7379e50c Merge pull request #96 from aquasecurity/fix-tests 
Fix tests
 2019-02-26 11:07:00 +00:00
Liz Rice 1581355a93 Read all the service account secrets 2019-02-26 08:38:35 +00:00
Liz Rice 9e0456bb66 Function is no longer getting service account token 2019-02-26 00:50:26 +00:00
Liz Rice ffc5508819 Use token as previously obtained 2019-02-26 00:50:26 +00:00
Liz Rice 9dcf617c5e Fix importing 2019-02-26 00:49:41 +00:00
Liz Rice f8945d8961 Tests in separate directory 2019-02-26 00:42:02 +00:00
Liz Rice ef7f856cac Move tests so they don’t get picked up by the regular executable 2019-02-26 00:36:53 +00:00
Liz Rice f0cd8d38bb Merge pull request #90 from aquasecurity/detect-api-server 
Only report API Servers that behave like Kubernetes API Servers
 2019-02-25 17:57:18 +00:00
Liz Rice 23fd1830a2 Doesn't hurt to mark this as Master 2019-02-25 17:54:59 +00:00
Liz Rice fe01598129 Correct secret location 2019-02-22 20:51:04 +00:00
Liz Rice c1fc84ec5e Better test that reflects Kubernetes response 2019-02-22 20:43:57 +00:00