Kube Hunter

Insecure Kubernetes clusters detection tool.

Installation

Run the following commands to clone and install pre-requisites:

git clone git@bitbucket.org:scalock/kube-hunter.git
cd kube-hunter
pip install -R requirements.txt
./kube-hunter -h

Current Features

The following action are currently supported:

Hunt

Supplied a host IP, the tool will search for open Kubernetes services, listening to default ports.
For each service found, it will check if it is insecure and grants capabilities.

./kube-hunter hunt 127.0.0.1

Scan

Supplied a subnet address (CIDR notation), the tool will scan for hosts with open Kubernetes services.

Supported Kubernetes Services

The tool currently supports the following services:

Kubernetes Dashboard

800 B Raw Blame History