mirror of
https://github.com/aquasecurity/kube-hunter.git
synced 2026-08-20 04:36:33 +00:00
danielsagiandGitHub
d7168af7d5
* changed link to point to avd * changed kb_links to be on base report module. and updated to point to avd. now json output returns the full avd url to the vulnerability * switched to adding a new avd_reference instead of changed the VID * added newline to fix linting
71 lines
2.3 KiB
Python
71 lines
2.3 KiB
Python
from kube_hunter.core.types import Discovery
|
|
from kube_hunter.modules.report.collector import (
|
|
services,
|
|
vulnerabilities,
|
|
hunters,
|
|
services_lock,
|
|
vulnerabilities_lock,
|
|
)
|
|
|
|
BASE_KB_LINK = "https://avd.aquasec.com/"
|
|
FULL_KB_LINK = "https://avd.aquasec.com/kube-hunter/{vid}/"
|
|
|
|
|
|
class BaseReporter:
|
|
def get_nodes(self):
|
|
nodes = list()
|
|
node_locations = set()
|
|
with services_lock:
|
|
for service in services:
|
|
node_location = str(service.host)
|
|
if node_location not in node_locations:
|
|
nodes.append({"type": "Node/Master", "location": node_location})
|
|
node_locations.add(node_location)
|
|
return nodes
|
|
|
|
def get_services(self):
|
|
with services_lock:
|
|
return [
|
|
{"service": service.get_name(), "location": f"{service.host}:{service.port}{service.get_path()}"}
|
|
for service in services
|
|
]
|
|
|
|
def get_vulnerabilities(self):
|
|
with vulnerabilities_lock:
|
|
return [
|
|
{
|
|
"location": vuln.location(),
|
|
"vid": vuln.get_vid(),
|
|
"category": vuln.category.name,
|
|
"severity": vuln.get_severity(),
|
|
"vulnerability": vuln.get_name(),
|
|
"description": vuln.explain(),
|
|
"evidence": str(vuln.evidence),
|
|
"avd_reference": FULL_KB_LINK.format(vid=vuln.get_vid().lower()),
|
|
"hunter": vuln.hunter.get_name(),
|
|
}
|
|
for vuln in vulnerabilities
|
|
]
|
|
|
|
def get_hunter_statistics(self):
|
|
hunters_data = []
|
|
for hunter, docs in hunters.items():
|
|
if Discovery not in hunter.__mro__:
|
|
name, doc = hunter.parse_docs(docs)
|
|
hunters_data.append(
|
|
{"name": name, "description": doc, "vulnerabilities": hunter.publishedVulnerabilities}
|
|
)
|
|
return hunters_data
|
|
|
|
def get_report(self, *, statistics, **kwargs):
|
|
report = {
|
|
"nodes": self.get_nodes(),
|
|
"services": self.get_services(),
|
|
"vulnerabilities": self.get_vulnerabilities(),
|
|
}
|
|
|
|
if statistics:
|
|
report["hunter_statistics"] = self.get_hunter_statistics()
|
|
|
|
return report
|