KubiScan

Инструмент для сканирования кластера Kubernetes на предмет опасных разрешений в модели управления доступом на основе ролей RBAC. Инструмент был опубликован в рамках исследования «Обеспечение безопасности кластеров Kubernetes путем устранения опасных разрешений»...

kubesploit

Kubesploit Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent dedicated for containerized environments written in Golang and built on top of Merlin project by Russel Van Tuyl @Ne0nd0g. Our Motivation While researching Docker and Kubernetes, we noticed that...

KubiScan - A Tool To Scan Kubernetes Cluster For Risky Permissions

A tool for scanning Kubernetes cluster for risky permissions in Kubernetes's Role-based access control RBAC authorization model. The tool was published as part of the "Securing Kubernetes Clusters by Eliminating Risky Permissions" research...