10 Commits

Author SHA1 Message Date
Manuel Rüger
e145f8f4a4 Dockerfile: Use apk with --no-cache (#204)
Signed-off-by: Manuel Rüger <manuel@rueg.eu>
2019-10-18 16:32:16 +03:00
danielsagi
2dad27a175 Decrease vulnerabilities on build (#170)
* changed python version to 3.8.rc and removed wireshark from build. also added a plugin to supress scapy's warnings about the manuf

* changed to alpine 3.10, on docker file and removed unnecessary logging suppression

* changed to python 3.7

* changed base image on builder as well
2019-08-27 11:27:17 +01:00
Weston Steimel
0caecd60ed optimised docker image (#123)
* optimised docker image

* use multi-stage image to remove build dependencies from final layer
* updated to python 3.7.3

Signed-off-by: Weston Steimel <weston.steimel@gmail.com>

* add /etc/ethertypes in final layer

Added ebtables and copy /etc/ethertypes to disable warning in verions of
scapy with EtherCat functionality.  This also fixes misspelling of
tcpdump package in build layer.

Signed-off-by: Weston Steimel <weston.steimel@gmail.com>
2019-07-03 08:48:03 +01:00
Weston Steimel
22334c67ad update dockerfile and travis
* Update docker image to python 3.7.2 and alpine3.9
* Update travis to test python3.7
* Remove part about using python2 in python3-based environment from
README

Signed-off-by: Weston Steimel <weston.steimel@gmail.com>
2019-03-07 22:36:01 +00:00
Michael Cherny
e854d92eef Make rebuilding kube-hunter image after code changes quick
Somewhat dirty (perhaps there is a better multi-stage build solution). First copy requirements.txt only and install all dependencies. Then copy all kube-hunter new code. This way only latest layer changing on code changes and all previous can be brought from cache.
2018-12-23 14:47:22 +02:00
Grambulf
3556b112a3 Update base image
There is a newer version of the base image
2018-09-01 16:07:29 +02:00
Cosmin Cojocar
de1508dfc7 Add tcpdump and wireshark into the Docker image to make scapy happy 2018-08-20 10:03:26 +02:00
Cosmin Cojocar
8fa842ae18 Add a dockerfile 2018-08-17 09:58:07 +02:00
daniel_sagi
fac667552e added cidr option, also added a while true when running on a pod, to halt for seeing results before restart 2018-06-17 19:01:23 +03:00
daniel_sagi
4a98d698a1 1. Added --pod flag to option "from pod" hunting. this will hunt the internal subnet of the cluster.
2. Added service account token and certificate handling, when running as a pod, to try and access resources that are "secured"
3. Added anonymous auth vulnerability detection
4. Changed requirements.txt for compatibility
2018-06-06 10:08:02 +03:00