search

aquasecurity / kube-hunter

Hunt for security weaknesses in Kubernetes clusters
Apache License 2.0
4.66k stars 579 forks source link

Implement Port Forward Test Hunting #413

Open danielsagi opened 3 years ago

danielsagi commented 3 years ago

What would you like to be added

Adding an implementation for reporting an open /portforward debug handler kubelet.py:test_port_forward

Why is this needed

Currently there is no indication for the existence of this handler. The goal is adding a way of testing this is open, without actually making changes to the cluster. (Passive check) Of course there is room for an additional active hunter that uses this :)