search

aquasecurity / kube-hunter

Hunt for security weaknesses in Kubernetes clusters
Apache License 2.0
4.66k stars 579 forks source link

stealth scanning #443

Open bret99 opened 3 years ago

bret99 commented 3 years ago

Default scan method is SYN. But it's detected on most enterprise AV's. Is it better to make stealth scan like in all loved nmap?

danielsagi commented 3 years ago

We would love to improve stealth. what are your specific suggestions?

bret99 commented 3 years ago

May be you should use flag "S" in arp.py like this => https://dev.to/ankitdobhal/syn-stealth-scan-with-power-of-python-scapy-58aj

danielsagi commented 3 years ago

Hi, our current scan does the same thing, we try to use connect, which basically just sends a SYN packet to the server. also scapy requires CAP_NET_RAW being enabled, so we don't want to require that on basic operations such as port scanning. @bret99