Yehuda Chikvashvili

It worked when added ClusterRole for listing namespaces. The logic behind the hunter is to list namespaces and try to create a pod inside every namespace found. When there is...

You can use KVH051

This is a major one so I'd like to get your opinion @lizrice @itaysk

Hi @shayfisher ! We would like to make kube-hunter running in disconnected environments. There is an ongoing work (#270 ) for declaration and management of external services integration. Once this...

Can we run some backend logic on GitHub pages to do that? What is the common way to do this on that platform?

Hi @carnal0wnage ! Sorry for taking forever to deal with this issue. Can you explain more about implications of finding an open cAdvisor endpoint? Are you familiar with cAdvisor vulnerabilities...

Agreed. I discussed with @itaysk about severity in the context of necessary refactor. The discussion essence it that apart of category mapping to severity, each and every event should declare...

Initially implemented at #145 which was torn down into several issues.

I agree that modular external IP discovery would be helpful. How do you think kube-hunter should choose its way of discovery? I find it a bit strange to configure it...

I think it is better to curate our own sources rather then letting the user handle this. As discussed #277, I believe the only option the user should have is...