Commit Graph

Select branches

Hide Pull Requests

add-severity

add_plugins_support

add_release_workflow

added_code_analysis_workflow

added_docs_for_exposed_pods

added_security_md

aquadev

bugfix/aws_metadata_scanning

bugfix/cloud_discovery

bugfix/fix_github_actions

bugfix/fix_release_workflow

bugfix/kubernetes_client_error_logs

change_links_to_avd

danielsagi-patch-1

dep/remove-netifaces

dep/remove_netifaces

devops/publish_to_pypi

documentation/mitre

feature/custom_hunting

feature/immersed

feature/mitre_support

feature/multiple_subscription

feature/service-account-token-flag

feature/support_multiple_subscription

fix-certificate-hunting

fix-dns-hunting

fix-hunting-bugs

fix-minor-linting-problem

fix-prettytable

fix/handler_configuration_not_initialized

fix_audit_log_proving

fix_lint_comments

fix_passive_hunting_run_handler

fix_pyinstaller_faliure

fixed-kubelet

improve-dockerfile

improve_aks_hunting

improve_help_message_worker_num_flag

improve_release_workflow

issue-359

lizrice-patch-1

logo

main

owenr-lowercase-severities

refactor/cloud_scanning

refactor_host_discovery

refresh_workflows

remove_cve_scanning

remove_scapy_usage

stop_using_cap_net_raw

update-deps

update-docs-dependencies

update_kramdown_dependency

update_new_aqua_web_design

update_version_on_job_manifest

#1

#10

#100

#101

#104

#105

#106

#11

#114

#115

#116

#117

#119

#12

#121

#123

#125

#128

#129

#13

#130

#131

#132

#133

#134

#135

#136

#137

#139

#14

#140

#141

#142

#145

#146

#147

#15

#150

#153

#154

#156

#157

#158

#159

#160

#161

#162

#163

#165

#166

#167

#168

#169

#170

#173

#175

#176

#178

#18

#181

#182

#183

#187

#188

#189

#19

#192

#193

#195

#196

#197

#198

#199

#2

#20

#200

#201

#202

#203

#204

#205

#206

#208

#209

#21

#210

#211

#212

#214

#215

#217

#218

#219

#22

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#231

#232

#233

#236

#237

#238

#239

#24

#242

#243

#244

#247

#248

#249

#25

#250

#251

#252

#255

#256

#257

#258

#259

#260

#261

#263

#264

#265

#266

#267

#269

#27

#270

#271

#272

#273

#275

#276

#278

#279

#281

#283

#286

#288

#29

#294

#297

#298

#299

#3

#30

#302

#303

#309

#310

#311

#313

#314

#315

#317

#318

#32

#323

#325

#327

#328

#33

#330

#332

#335

#337

#338

#34

#342

#344

#347

#350

#351

#354

#355

#357

#360

#361

#362

#363

#364

#365

#367

#368

#369

#371

#372

#376

#377

#378

#382

#383

#384

#385

#386

#387

#388

#389

#39

#390

#391

#392

#396

#397

#398

#399

#4

#400

#401

#402

#403

#406

#407

#409

#411

#412

#414

#415

#416

#419

#42

#420

#421

#422

#423

#423

#424

#425

#427

#429

#430

#431

#436

#439

#441

#447

#448

#450

#451

#453

#454

#455

#458

#458

#461

#463

#464

#466

#468

#470

#471

#474

#478

#481

#482

#484

#485

#487

#488

#489

#49

#49

#491

#492

#495

#497

#5

#50

#500

#501

#504

#506

#508

#509

#51

#51

#510

#510

#511

#511

#518

#518

#519

#52

#520

#528

#528

#53

#530

#530

#539

#539

#54

#540

#540

#542

#542

#543

#543

#544

#546

#55

#550

#551

#555

#555

#57

#58

#6

#60

#62

#63

#65

#66

#67

#68

#69

#7

#72

#73

#74

#76

#77

#8

#81

#82

#85

#86

#87

#88

#89

#9

#90

#92

#93

#94

#95

#96

#97

v0.2.0

v0.3.0

v0.3.0-rc1

v0.3.1

v0.3.2

v0.4.0

v0.4.1

v0.5.0

v0.5.1

v0.5.2

v0.6.0

v0.6.1

v0.6.2

v0.6.3

v0.6.4

v0.6.5

v0.6.6

v0.6.7

v0.6.8

Mono Color

• 607612866f resolved dependency issue of the json.py file, renamed it to json_reporter manish 2019-02-22 15:13:58 +01:00
• e6b577ade0 Merge branch 'master' into pod-remote Liz RiceandGitHub 2019-02-22 11:09:45 +00:00
• 66fed51036 Merge pull request #92 from maniish-jaiin/feature-json-reporter Liz RiceandGitHub 2019-02-21 16:51:14 +00:00
• dbd1449208 Merge branch 'master' into feature-json-reporter Liz RiceandGitHub 2019-02-21 11:59:19 +00:00
• 5380caca6b Add json to the format options in help Liz RiceandGitHub 2019-02-21 11:20:25 +00:00
• f11319766b Typo Liz RiceandGitHub 2019-02-21 11:19:19 +00:00
• 855f67f9a9 Merge branch 'feature-json-reporter' of https://github.com/maniish-jaiin/kube-hunter into feature-json-reporter maniish-jaiin 2019-02-21 11:18:56 +01:00
• 9d68679df0 renamed the function name and json_reporter to json maniish-jaiin 2019-02-21 11:17:06 +01:00
• 78b7574217 renamed the function name and json_reporter to json maniish-jaiin 2019-02-21 11:17:06 +01:00
• e2b5f0f5a0 Remove deprecation warning Liz Rice 2019-02-20 17:39:33 +00:00
• 1021aca65d Trigger HostScanEvent to scan remote or CIDR addresses Liz Rice 2019-02-20 17:16:32 +00:00
• 4f9a362e6a created reporter for json format manish 2019-02-20 13:36:24 +01:00
• 9ea7ffcbef Merge pull request #89 from aquasecurity/lizrice-patch-4 Liz RiceandGitHub 2019-02-20 11:28:32 +00:00
• 2f47fc835c Merge branch 'master' into lizrice-patch-4 Liz RiceandGitHub 2019-02-19 15:33:39 +00:00
• ae45814221 Update README.md Liz RiceandGitHub 2019-02-19 15:24:47 +00:00
• fb638dcc7e Merge pull request #88 from aquasecurity/support-tests Liz RiceandGitHub 2019-02-19 13:15:15 +00:00
• ba224f150d Requests tests to support code changes Liz RiceandGitHub 2019-02-19 13:12:14 +00:00
• 3b9fe3b30d Merge branch 'master' into support-tests Liz RiceandGitHub 2019-02-19 13:10:40 +00:00
• 6dd87e12f8 Add test runner to Travis Liz Rice 2019-02-19 13:01:27 +00:00
• 765899ca4a Need script to run test because of odd config import Liz Rice 2019-02-19 13:01:12 +00:00
• 0866a2763f Remove unnecessary event (presumably copy-pasted) Liz Rice 2019-02-19 12:58:04 +00:00
• 67ef517742 Merge pull request #87 from ttousai/patch-1 Liz RiceandGitHub 2019-02-19 09:46:15 +00:00
• 5cd9efec15 Update README.md Liz RiceandGitHub 2019-02-19 09:40:28 +00:00
• b0d014848c Link prerequisites to detailed instruction later in the page Abubakr-Sadik Nii Nai DavisandGitHub 2019-02-18 20:46:54 +00:00
• 68b736c7c3 Add pip command to install required modules Abubakr-Sadik Nii Nai DavisandGitHub 2019-02-18 15:45:50 +00:00
• 09e9a0c2ad Merge pull request #81 from aquasecurity/secrets-typo Liz RiceandGitHub 2019-02-05 14:25:06 +00:00
• 4ddb163945 Merge branch 'master' into secrets-typo mchernyandGitHub 2019-02-04 18:28:39 +02:00
• 9d010d4798 Typo Liz Rice 2019-01-18 17:15:05 +00:00
• 8d367d1aa0 Merge pull request #69 from FormationAI/formation Liz RiceandGitHub 2019-01-17 16:12:11 +00:00
• 9b3529db0c D'oh Liz RiceandGitHub 2019-01-17 16:05:47 +00:00
• 985d76f8a6 Recent change moved service account token access Liz RiceandGitHub 2019-01-17 15:51:40 +00:00
• 880cd3781c Merge branch 'master' into formation Liz RiceandGitHub 2019-01-17 15:06:45 +00:00
• e81a938e4f Merge pull request #76 from mcherny/fix-service-account-token-vuln Liz RiceandGitHub 2019-01-17 14:59:38 +00:00
• 4f3f2dc1ef Merge branch 'master' into fix-service-account-token-vuln Liz RiceandGitHub 2019-01-17 14:24:42 +00:00
• 06218f3267 Create NOTICE Liz RiceandGitHub 2019-01-14 15:12:24 +00:00
• a16dfa5f1c Fix: the pod service account token vulnerability 'Location' is wrong Michael Cherny 2019-01-14 09:50:05 +02:00
• eb462086e0 Only guard 'publish_event(ServiceAccountTokenAccess(..))' with needing the service account Nick Hibberd 2019-01-06 16:53:23 -08:00
• 4c14d8b78d Merge pull request #74 from mcherny/refacture-from-pod Liz RiceandGitHub 2019-01-04 11:26:49 +00:00
• f5a0ae0990 Minor changes to comments Liz RiceandGitHub 2019-01-04 11:25:04 +00:00
• 2ef0ac9479 Tiny typo Liz RiceandGitHub 2019-01-04 11:10:44 +00:00
• 3a5c1376a1 Merge pull request #73 from mcherny/misha-fix-in-azure-from-pod Liz RiceandGitHub 2019-01-03 16:50:44 +00:00
• 545c603a5f Refacture host discovery to explicitly split discovery from outside cluster and discovery from pod. Michael Cherny 2018-12-27 19:59:58 +02:00
• a7dd3a505c Add '--quick' option to kube-hunter command line arguments Michael Cherny 2018-12-23 14:37:15 +02:00
• 263ba5e203 Merge pull request #72 from mcherny/misha-dockerfile-quick-rebuild Liz RiceandGitHub 2018-12-26 17:40:56 +00:00
• e854d92eef Make rebuilding kube-hunter image after code changes quick Michael Cherny 2018-12-23 14:47:22 +02:00
• 7a85962a0d Add basic system:anonymous testing Nick Hibberd 2018-12-10 13:48:59 -08:00
• 16ff0afba4 CVE-2018-10020105 reported too often (#68) Liz Riceandjerbia 2018-12-06 21:23:06 +01:00
• 3836a8f8c4 Shallow detection cve 2018 1002105 (#67) Ori Agmonandjerbia 2018-12-06 00:47:16 +02:00
• 22a9a16631 Shallow detection cve 2018 1002105 (#66) Ori Agmonandjerbia 2018-12-06 00:30:31 +02:00
• cb0164edd1 Shallow detection cve 2018 1002105 (#65) Ori Agmonandjerbia 2018-12-05 23:30:45 +02:00
• c3d51d530a Merge pull request #60 from aquasecurity/more-service-account-token-hunters Liz RiceandGitHub 2018-12-04 14:16:03 +01:00
• 8e51c5e501 Merge branch 'master' into more-service-account-token-hunters Liz RiceandGitHub 2018-12-04 14:12:16 +01:00
• e793a0ff2a Merge pull request #62 from aquasecurity/adding_more_comments Liz RiceandGitHub 2018-12-04 14:11:14 +01:00
• 03bd8ee637 Merge pull request #63 from aquasecurity/fixed_no_cluster_find_when_0vulns Liz RiceandGitHub 2018-12-04 14:11:00 +01:00
• b26121fb6c Fixed bug: - Kube Hunter did not find any cluster when 0 vulnerabilities found oriagmon 2018-12-04 14:14:23 +02:00
• 32fee9a0a9 Minor typo oriagmon 2018-12-03 20:27:47 +02:00
• 205d25df5d etcd commenting & secrets commenting oriagmon 2018-12-03 20:24:51 +02:00
• 3d263382e9 etcd commenting oriagmon 2018-12-03 20:15:36 +02:00
• 51e00e480c Merge branch 'master' into more-service-account-token-hunters Ori AgmonandGitHub 2018-11-07 23:44:16 +02:00
• 5dd70aaa6e Reset repo before the commit of split the hunters oriagmon 2018-11-07 23:38:18 +02:00
• e91b2590d5 Fixed more PR comment (ascii encode) oriagmon 2018-11-07 22:20:05 +02:00
• cebba76866 Minor oriagmon 2018-11-07 21:47:27 +02:00
• 3ff8fda30e Typos & text changes Liz Riceandoriagmon 2018-11-06 09:30:18 +00:00
• 665956d441 Minor typo Liz Riceandoriagmon 2018-11-06 09:10:03 +00:00
• afce211c4e Finished with Most of the pr fixes oriagmon 2018-11-07 20:56:49 +02:00
• c41d66a78c Added & Tested Create A Privileged Pod method oriagmon 2018-10-29 16:54:53 +02:00
• d53cb9ca38 Minor: Forgot to add more accurate event categories oriagmon 2018-10-24 14:32:59 +03:00
• f9aa8254fd Finished & Tested:-) oriagmon 2018-10-23 18:00:07 +03:00
• cd8a95e3f8 Added required class event for delete namespace oriagmon 2018-10-23 16:57:37 +03:00
• 5170686d1b Removed testing code, improved comments. This hunter was fully tested and it fully worked. I have added another method to delete a namespace, once I test it it would be ready for a PR! oriagmon 2018-10-23 16:48:26 +03:00
• 08ff6c3bfe Improved evidences oriagmon 2018-10-23 15:10:16 +03:00
• 376167b047 Fixed patching methods oriagmon 2018-10-23 14:57:56 +03:00
• 32322d68b0 Fixed roles & cluster roles creation & deletion bug. just have to fixed the patching api calls now oriagmon 2018-10-23 14:26:47 +03:00
• 81e54b334d Fixed roles & cluster roles creation & deletion bug. just have to fixed the patching api calls now :D oriagmon 2018-10-23 13:58:00 +03:00
• 8dae387e6b Commented the pod api calls, so it would be easier to test oriagmon 2018-10-23 12:28:47 +03:00
• 75a813ce6f Only the pod patching and the roles & cluster roles api calls are left to test!! oriagmon 2018-10-23 11:54:42 +03:00
• 38320d2190 WIP, Got to go :) Only have to finish testing the *active hunters' oriagmon 2018-10-22 23:01:51 +03:00
• 3ffe2a93d2 Fixed formated json string oriagmon 2018-10-22 22:58:37 +03:00
• 6dcc9cd381 Generated random string as resource names oriagmon 2018-10-22 22:37:16 +03:00
• 2a4725cca4 Some triggering fixes & active hunter bugs oriagmon 2018-10-22 20:28:08 +03:00
• 2090e6c1c6 Remove irrelevant comments oriagmon 2018-10-22 18:53:23 +03:00
• b5b6491db5 Removed unused variables oriagmon 2018-10-22 18:51:01 +03:00
• 5d9c9aec71 Passive hunters are finished! just have to test them on non admin pod too oriagmon 2018-10-22 18:48:54 +03:00
• 443b9202fe Parsed response str to dictionary on all methods, working on numbers values too now oriagmon 2018-10-22 16:57:47 +03:00
• 903c8e4d11 Parsed response str to dictionary oriagmon 2018-10-22 16:15:41 +03:00
• aa04c71b94 Fixed some minor errors in passive hunter & used more of the active hunter methods oriagmon 2018-10-22 15:39:16 +03:00
• 1d62bcd1c7 Finish Implemented hunters & moved some active hunters to passive hunter. oriagmon 2018-10-22 15:11:55 +03:00
• f980f088f2 WIP, time to fix PR on another branch oriagmon 2018-10-22 11:29:17 +03:00
• cd258bd321 WIP, but have to go now: (1)Tested manually most of the methods! (2) Published most of events. (3) Added TODOs. oriagmon 2018-10-21 18:00:32 +03:00
• 29c8d8e942 Added corresponding events & descriptions for the new methods oriagmon 2018-10-21 17:32:03 +03:00
• c5bcb56707 Manually tested requests and changed some methods! oriagmon 2018-10-21 17:19:31 +03:00
• ebd9b7fcd5 Improved todo, Added all api calls to API server, we have to test & modify them (when needed) oriagmon 2018-10-21 14:49:14 +03:00
• 936e93d5f2 minor Typo oriagmon 2018-10-21 14:25:23 +03:00
• 352c33cbb8 Added all the rest of the api calls to the API server and specified algorithm in words oriagmon 2018-10-21 14:24:41 +03:00
• 101fee6d9a I didn't Finish that hunter yet ( a todo is detailed on my Trello). oriagmon 2018-10-16 12:53:38 +03:00
• 82d4af5ba3 Finish that hunter (detailed on my Trello). oriagmon 2018-10-16 12:10:51 +03:00
• 45b804be94 Added a lot of active hunters, using different API Server methods to publish all relevant events from a compromised pod oriagmon 2018-10-15 20:12:59 +03:00
• c336a2a23e Added two hunters attempting to exploit authorized pod RBAC configurations oriagmon 2018-10-15 17:35:36 +03:00
• 93d9db658e Listen on port 443 as well now. oriagmon 2018-10-15 17:32:50 +03:00
• 7a006ef51e Fixed PR comment: Added proper exception handling. Added logging for this hunter. ori.agmonandoriagmon 2018-10-14 12:27:54 +03:00