kube-hunter
Active Kubernetes attacker-view scanner. Only against clusters in scope. Looks for open APIs, kubelets, and dashboards.
Tags: kubernetes, k8s
- Category
- cloud
- Maintenance signal
- maintained
Use this when: Misconfig. Use this on a cluster you are authorized to assess.
Install
pipx
pipx install kube-hunterCommand templates
Remote CIDR
kube-hunter --remote {host}