github/kube-hunter
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-hunter.git synced 2026-08-20 04:36:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • ad5a4eba86 Improved vulnerability description for this hunter ori.agmonandoriagmon 2018-10-10 11:33:48 +03:00
  • d4d1751d3e Minor changes-> removed unused imports & small fixes ori.agmonandoriagmon 2018-10-09 22:03:31 +03:00
  • b74225e027 Added apiserver hunter, would attempt to get the service account token and access the server api with it ori.agmonandoriagmon 2018-10-09 21:26:06 +03:00
  • 458381fb2d Fixed more PR comment (ascii encode) oriagmon 2018-11-07 22:20:05 +02:00
  • 2a3764e097 Minor oriagmon 2018-11-07 21:47:27 +02:00
  • 14db8edd39 Finished with Most of the pr fixes oriagmon 2018-11-07 20:56:49 +02:00
  • 7502b10005 Typos & text changes Liz Riceandoriagmon 2018-11-06 09:30:18 +00:00
  • 1762b2fbd4 Minor typo Liz Riceandoriagmon 2018-11-06 09:10:03 +00:00
  • 2264754908 Added & Tested Create A Privileged Pod method oriagmon 2018-10-29 16:54:53 +02:00
  • 03c21fe62f Minor: Forgot to add more accurate event categories oriagmon 2018-10-24 14:32:59 +03:00
  • ab3d429672 Finished & Tested:-) oriagmon 2018-10-23 18:00:07 +03:00
  • 5e1799f294 Added required class event for delete namespace oriagmon 2018-10-23 16:57:37 +03:00
  • da02a5df9e Removed testing code, improved comments. This hunter was fully tested and it fully worked. I have added another method to delete a namespace, once I test it it would be ready for a PR! oriagmon 2018-10-23 16:48:26 +03:00
  • 33544c2e84 Improved evidences oriagmon 2018-10-23 15:10:16 +03:00
  • 204650b8eb Fixed patching methods oriagmon 2018-10-23 14:57:56 +03:00
  • 5c8ed31b50 Fixed roles & cluster roles creation & deletion bug. just have to fixed the patching api calls now oriagmon 2018-10-23 14:26:47 +03:00
  • 00941fc5a9 Fixed roles & cluster roles creation & deletion bug. just have to fixed the patching api calls now :D oriagmon 2018-10-23 13:58:00 +03:00
  • f659849f67 Commented the pod api calls, so it would be easier to test oriagmon 2018-10-23 12:28:47 +03:00
  • 9456f2a355 Only the pod patching and the roles & cluster roles api calls are left to test!! oriagmon 2018-10-23 11:54:42 +03:00
  • 735f5b77dd WIP, Got to go :) Only have to finish testing the *active hunters' oriagmon 2018-10-22 23:01:51 +03:00
  • ab9505a226 Fixed formated json string oriagmon 2018-10-22 22:58:37 +03:00
  • 5139b21261 Generated random string as resource names oriagmon 2018-10-22 22:37:16 +03:00
  • 09b32d1ecd Some triggering fixes & active hunter bugs oriagmon 2018-10-22 20:28:08 +03:00
  • 65b821cc01 Remove irrelevant comments oriagmon 2018-10-22 18:53:23 +03:00
  • f89690cd8c Removed unused variables oriagmon 2018-10-22 18:51:01 +03:00
  • 1bf1598de0 Passive hunters are finished! just have to test them on non admin pod too oriagmon 2018-10-22 18:48:54 +03:00
  • 0bc92c255b Parsed response str to dictionary on all methods, working on numbers values too now oriagmon 2018-10-22 16:57:47 +03:00
  • d704d9e117 Parsed response str to dictionary oriagmon 2018-10-22 16:15:41 +03:00
  • 8a14de9454 Fixed some minor errors in passive hunter & used more of the active hunter methods oriagmon 2018-10-22 15:39:16 +03:00
  • e60d44b5ae Finish Implemented hunters & moved some active hunters to passive hunter. oriagmon 2018-10-22 15:11:55 +03:00
  • e8eb192b35 WIP, time to fix PR on another branch oriagmon 2018-10-22 11:29:17 +03:00
  • d7e2ac9dc7 WIP, but have to go now: (1)Tested manually most of the methods! (2) Published most of events. (3) Added TODOs. oriagmon 2018-10-21 18:00:32 +03:00
  • 830c42b76e Added corresponding events & descriptions for the new methods oriagmon 2018-10-21 17:32:03 +03:00
  • 889ea7316c Manually tested requests and changed some methods! oriagmon 2018-10-21 17:19:31 +03:00
  • 9ae772eeaa Improved todo, Added all api calls to API server, we have to test & modify them (when needed) oriagmon 2018-10-21 14:49:14 +03:00
  • 47aa4c40bb minor Typo oriagmon 2018-10-21 14:25:23 +03:00
  • 16a6590f5e Added all the rest of the api calls to the API server and specified algorithm in words oriagmon 2018-10-21 14:24:41 +03:00
  • d1c59fb982 I didn't Finish that hunter yet ( a todo is detailed on my Trello). oriagmon 2018-10-16 12:53:38 +03:00
  • 1c324a3f2a Finish that hunter (detailed on my Trello). oriagmon 2018-10-16 12:10:51 +03:00
  • b95feebcba Added a lot of active hunters, using different API Server methods to publish all relevant events from a compromised pod oriagmon 2018-10-15 20:12:59 +03:00
  • eaa0d8e8e0 Added two hunters attempting to exploit authorized pod RBAC configurations oriagmon 2018-10-15 17:35:36 +03:00
  • 5a790b1ece Listen on port 443 as well now. oriagmon 2018-10-15 17:32:50 +03:00
  • 359b766e17 Fixed PR comment: Added proper exception handling. Added logging for this hunter. ori.agmonandoriagmon 2018-10-14 12:27:54 +03:00
  • a3b80dc92d Improved vulnerability description for this hunter ori.agmonandoriagmon 2018-10-10 11:33:48 +03:00
  • a3a7e33f9c Minor changes-> removed unused imports & small fixes ori.agmonandoriagmon 2018-10-09 22:03:31 +03:00
  • 2930167d78 Added apiserver hunter, would attempt to get the service account token and access the server api with it ori.agmonandoriagmon 2018-10-09 21:26:06 +03:00
  • 369e70ad6e Fixed the PR comments :-) ori.agmonandoriagmon 2018-10-08 17:21:29 +03:00
  • 72dfbdc34d Fixed the PR comments :-) ori.agmonandoriagmon 2018-10-08 17:18:19 +03:00
  • c200fcc416 Improved unauthorized access false positive on edge case (where user is running using https & 127.0.0.1 & needed certificates) ori.agmonandoriagmon 2018-10-07 17:16:07 +03:00
  • a67e6a57c3 Added evidence to the no auth event & tested it on a vulnerable remote cluster (and it worked!) ori.agmonandoriagmon 2018-10-07 16:59:49 +03:00
  • 5d6eea72f7 Updated the todos list ori.agmonandoriagmon 2018-10-07 11:45:52 +03:00
  • 5dbcdcedb7 Added categories to all vulnerabilities ori.agmonandoriagmon 2018-10-07 11:42:21 +03:00
  • 2da03d812d Fixed a small bug in the active hunter ori.agmonandoriagmon 2018-10-03 18:50:53 +03:00
  • 0299800cd2 Fixed a small bug in the active hunter ori.agmonandoriagmon 2018-10-03 18:48:54 +03:00
  • 730b19547b Fixed a small bug in the active hunter & passive hunter ori.agmonandoriagmon 2018-10-03 18:46:48 +03:00
  • 1d7120bfe1 Updated the TODOS list (Only 2 left!) ori.agmonandoriagmon 2018-10-03 18:34:43 +03:00
  • 5e42246773 Added some evidences to events & deleted unused code ori.agmonandoriagmon 2018-10-03 18:32:31 +03:00
  • 40213db654 I've Split the etcd hunters to hunting & discovery dirs ori.agmonandoriagmon 2018-10-03 18:20:35 +03:00
  • 9148d5273b Added init method to the etcd active hunter ori.agmonandoriagmon 2018-10-02 19:32:32 +03:00
  • 0a4c80cb09 Solved some exception bugs & did some refactoring to code & Added event & splited active & passive hunter ori.agmonandoriagmon 2018-10-02 18:55:50 +03:00
  • e764d5f21b Solved some exception bugs & did some refactoring to code & Added event ori.agmonandoriagmon 2018-10-02 18:02:12 +03:00
  • 09c076c6a5 Solved some exception bugs & did some refactoring to code ori.agmonandoriagmon 2018-10-02 17:57:50 +03:00
  • 10e9a63e50 Added timeout for each request. Finished with some of the TODOS tasks (added logs). Added another TODO task for this branch. ori.agmonandoriagmon 2018-10-02 11:59:25 +03:00
  • bca2f3614c Edited some of the etcd checking & added 2379 port checking ori.agmonandoriagmon 2018-09-30 14:03:42 +03:00
  • 242260b03e Added some remote access to etcd checks. ori.agmonandoriagmon 2018-09-26 18:42:06 +03:00
  • bb52711c41 Merge pull request #42 from aquasecurity/updateDocForPythonPath Liz RiceandGitHub 2018-11-06 10:33:42 +00:00
  • 6d73a2cde3 Update README.md Liz RiceandGitHub 2018-11-06 10:32:44 +00:00
  • aca2784598 Merge pull request #53 from aquasecurity/access-secrets-hunter Liz RiceandGitHub 2018-11-06 10:30:17 +00:00
  • 1171c8ae20 Merge branch 'master' into access-secrets-hunter Liz RiceandGitHub 2018-11-06 09:08:14 +00:00
  • df5d0bc3f6 Merge pull request #58 from aquasecurity/solve-multi-threading-bug Liz RiceandGitHub 2018-10-22 13:34:26 +01:00
  • 951efab5e0 Fixed PR comments. oriagmon 2018-10-22 11:39:53 +03:00
  • fc0960d3bb Merge branch 'master' into access-secrets-hunter Ori AgmonandGitHub 2018-10-21 12:04:59 +03:00
  • 590ba9d3f2 Solved spacing conflict oriagmon 2018-10-21 11:57:58 +03:00
  • 812edafe80 Solved spacing conflict oriagmon 2018-10-21 11:51:44 +03:00
  • 3b0d2233fd Solved spacing conflict oriagmon 2018-10-21 11:50:42 +03:00
  • a7e4ebf369 Solved spacing conflict oriagmon 2018-10-21 11:47:15 +03:00
  • 54da07a73e Cleaned this branch to contain only updated secrets branch without locking oriagmon 2018-10-21 11:23:30 +03:00
  • 76692a36d7 Finished with the left of the PR comments. oriagmon 2018-10-21 10:53:50 +03:00
  • 7e324c5374 Fixed safe to change PR comments. the next fixes of these PR would need to be tested oriagmon 2018-10-21 10:47:48 +03:00
  • 1eb422c0a6 Merge pull request #52 from aquasecurity/checkEtcdHunter Liz RiceandGitHub 2018-10-17 18:34:33 +01:00
  • 6602821a80 DONE oriagmon 2018-10-17 20:21:27 +03:00
  • a109dd956b found another variable I think should be locked oriagmon 2018-10-17 17:54:11 +03:00
  • 8ede3b4f74 return self.version_evidence --> return self.keys_evidence oriagmon 2018-10-17 15:54:51 +03:00
  • 26f3878f7c Using stricter locking "policy" oriagmon 2018-10-17 15:28:18 +03:00
  • 73e533624a Fixed all PR comments! & improved commenting & indenting oriagmon 2018-10-17 14:57:27 +03:00
  • c4a81ca6f9 Added proper exception handling oriagmon 2018-10-17 14:24:07 +03:00
  • 655467c27a Solved hidden exception that stopped program normal run. oriagmon 2018-10-17 12:53:31 +03:00
  • 87232a12cd Fixed PR: Used the same lock for each variable & changed locks names oriagmon 2018-10-17 12:36:04 +03:00
  • a8762a4ada Fixed PR: Used the same lock for each variable & changed locks names oriagmon 2018-10-17 11:32:50 +03:00
  • b37ebf0fee Removed note & added parentheses to a return statement condition oriagmon 2018-10-17 10:44:34 +03:00
  • 3b1de53c18 Merge pull request #55 from aquasecurity/moveAzureComponentToTypes Liz RiceandGitHub 2018-10-16 21:08:17 +01:00
  • e679c93d4a Tiny typo correction Liz RiceandGitHub 2018-10-16 20:13:21 +01:00
  • e501e9ee63 removed running main a few timees oriagmon 2018-10-16 18:09:16 +03:00
  • 568e96c2f4 merged with multi-threaded-bug oriagmon 2018-10-16 17:18:36 +03:00
  • 1b18825b5e Merge branch 'solve-multi-threading-bug' into access-secrets-hunter oriagmon 2018-10-16 17:16:42 +03:00
  • 1883abaa23 Updated read me for devs so the mistake won't happen again ori.agmonandoriagmon 2018-10-14 16:04:37 +03:00
  • 1e4ead93f4 Created RunningAsPodEvent Throw it from hosts.py when running form pod I was able to subscribe to the RunningAsPodEvent thanks to a Rebased with the branch that fix the circular dependencies bug (moveAzureComponentToTypes branch) ori.agmonandoriagmon 2018-10-14 15:24:11 +03:00
  • 1f01076cf6 Created RunningAsPodEvent Throw it from hosts.py when running form pod I was able to subscribe to the RunningAsPodEvent thanks to a Rebased with the branch that fix the circular dependencies bug (moveAzureComponentToTypes branch) ori.agmonandoriagmon 2018-10-14 15:09:39 +03:00
  • 08f38c623f Had to remove the Azure component form the hunting/aks since it made a circular dependency bug! ori.agmonandoriagmon 2018-10-14 14:51:15 +03:00
  • 1f9b611237 Fixed all PR comments, just have to change the subscription now.. ori.agmonandoriagmon 2018-10-14 12:00:13 +03:00