aquasecurity/kube-hunter
Kube Hunter
Kube-hunter 是一个用于 Kubernetes 集群的安全扫描器和漏洞猎手。它作为一个云原生渗透工具运行，旨在通过模拟攻击者技术来识别安全弱点、基础设施配置错误和可利用的漏洞。
该工具以其双模式扫描引擎而著称，该引擎既执行远程外部探测，也执行内部网络扫描。它具有基于身份的模拟功能，允许它使用服务账户令牌和 Pod 身份来模拟来自特定集群角色的安全访问，并确定容器受损的潜在影响范围。
该项目涵盖了广泛的安全评估能力，包括集群漏洞扫描、内部网络拓扑映射和合规性验证。它可以检测暴露的密钥、分析基础设施模板中的配置错误，并执行主动利用尝试以验证发现的漏洞是否可被利用。
该应用程序被打包为独立的可执行文件，以在部署期间消除运行时依赖。
Features
- Kubernetes Vulnerability Hunters - Provides an active probing tool to identify exploitable gaps in Kubernetes nodes and service account permissions.
- Penetration Testing Frameworks - Simulates attacker techniques and pod compromises to identify lateral movement paths and exploitability.
- Live Cluster Security Scanners - Inspects running Kubernetes clusters to identify security weaknesses and best practice violations.
- Internal Network Penetration Testers - Analyzes network interfaces from within the environment to identify internal exposure and lateral movement paths.
- Cloud Native Penetration Testing - Provides a specialized utility for simulating pod compromises and mapping internal network topology in Kubernetes.
- Exploitability Verification - Verifies if discovered vulnerabilities are actually leverageable by performing active exploitation attempts.
- Internal Network Discoverers - Maps the network topology of a cluster to identify internal services and unauthorized exposure.
- Automated Node Discovery - Provides automated discovery of cluster nodes via system APIs to target them for security scanning.
- Compromise Simulations - Simulates pod compromises as a local unit to determine the potential blast radius and accessible resources.
- Infrastructure Security Scanners - Analyzes cluster state and infrastructure templates to detect security gaps and non-compliant settings.
- Kubernetes Cluster Assessments - Probes cluster nodes and APIs to discover exposed secrets and infrastructure gaps to harden the environment.
- Network Vulnerability Scanning - Probes external IPs or domains from an outside machine to simulate the perspective of an external attacker.
- Account Impersonation - Simulates security access by assuming the identity of specific Kubernetes service accounts and pod roles.
- Kubernetes Security Assessments - Scans Kubernetes clusters to identify security weaknesses and misconfigurations that could be exploited.
- Vulnerability Scanning - Scans clusters to identify security weaknesses and infrastructure misconfigurations to help harden the environment.
- Active Scanning Engines - Implements an active scanning engine that executes both remote probes and internal network scans to identify vulnerabilities.
- Network Topology Mapping - Generates maps of discovered nodes within specified network ranges to visualize cluster topology.
- Kubernetes Compliance Monitoring - Analyzes infrastructure templates and cluster states to verify compliance with security standards and policies.
- Misconfiguration Scanning - Analyzes infrastructure templates and cluster states against security benchmarks to find non-compliant configurations.
- Secret Scanning - Scans files and images for sensitive information such as passwords or keys accidentally committed to source control.
- Security Finding Dispatchers - Routes discovered security vulnerabilities through a filtering pipeline to standard output or remote analysis endpoints.
- Security Module Integrations - Allows the integration of custom modules that subscribe to cluster events to trigger new security checks.
- Modular Plugin Frameworks - Provides a plugin-based framework where modular hunter classes subscribe to discovery events to perform security checks.
- Cloud Native Security - Hunts for security weaknesses in Kubernetes clusters.
- Attacking - Listed in the “Attacking” section of the Awesome K8s Security awesome list.
- Application Security - Hunts for security weaknesses in Kubernetes clusters.
- Cloud Security - Scans Kubernetes clusters for security weaknesses.
- Hunting Tools - Tool for hunting security weaknesses in Kubernetes clusters.
- Kubernetes Security - Active security scanner for Kubernetes clusters.
- Security and Compliance - Scans clusters for potential security weaknesses.
- Vulnerability Scanning - Hunts for security weaknesses within cluster environments.
