mirror of
https://github.com/aquasecurity/kube-hunter.git
synced 2026-02-14 18:09:56 +00:00
Compare commits
5 Commits
bugfix/fix
...
fix-huntin
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
16103bfbcf | ||
|
|
129ac8d0eb | ||
|
|
19c00e9ee2 | ||
|
|
ab40d90b13 | ||
|
|
45a92a9577 |
@@ -143,7 +143,7 @@ class EtcdRemoteAccess(Hunter):
|
||||
logger.debug(f"Trying to check etcd version remotely at {self.event.host}")
|
||||
try:
|
||||
r = requests.get(
|
||||
f"{self.protocol}://{self.event.host}:{ETCD_PORT}/version",
|
||||
f"{self.event.protocol}://{self.event.host}:{ETCD_PORT}/version",
|
||||
verify=False,
|
||||
timeout=config.network_timeout,
|
||||
)
|
||||
@@ -167,10 +167,10 @@ class EtcdRemoteAccess(Hunter):
|
||||
|
||||
def execute(self):
|
||||
if self.insecure_access(): # make a decision between http and https protocol
|
||||
self.protocol = "http"
|
||||
self.event.protocol = "http"
|
||||
if self.version_disclosure():
|
||||
self.publish_event(EtcdRemoteVersionDisclosureEvent(self.version_evidence))
|
||||
if self.protocol == "http":
|
||||
if self.event.protocol == "http":
|
||||
self.publish_event(EtcdAccessEnabledWithoutAuthEvent(self.version_evidence))
|
||||
if self.db_keys_disclosure():
|
||||
self.publish_event(EtcdRemoteReadAccessEvent(self.keys_evidence))
|
||||
|
||||
Reference in New Issue
Block a user