hunt-k8s

To check Kubernetes API anonymous access, run a phase-driven workflow that fingerprints the control plane and tests for unauthenticated API requests, identifying misconfigurations that enable unauthorized access to cluster resources.

Kubelet exposure on port 10250 is a security misconfiguration allowing unauthenticated access to node APIs. You detect it by running targeted unauth checks against exposed kubelet endpoints to identify unauthorized command execution risks.

Testing etcd for unauthenticated access on port 2379 involves probing the exposed etcd database endpoint to verify whether sensitive cluster state data and secrets can be retrieved without valid credentials.

Yes, you can detect Docker socket exposure and service account token abuse by running guided workflow tests that enumerate exposed container runtime sockets and validate whether compromised SA tokens enable privilege escalation.

Yes, the security assessment applies to cloud metadata environments by identifying Kubernetes and Docker misconfigurations across containerized infrastructure, including exposed dashboards, RBAC issues, and secret leakage in cloud-hosted clusters.

The best way to find Kubernetes dashboard exposure and RBAC misconfigurations is through a phase-driven workflow that fingerprints exposed dashboard endpoints and evaluates role-based access control settings for privilege escalation chains.