hunt-k8s

What problem does it solve?

Kubernetes and Docker security assessments for containerized workloads, identifying anonymous API access, kubelet exposure, etcd unauth access, dashboard exposure, RBAC misconfig, secret leakage, and service account token abuse to help defenders prioritize remediation.

Core Features & Use Cases

• Fingerprint and port discovery across Kubernetes control planes and container runtimes.
• Phase-driven tests for API anonymous access, kubelet unauth on port 10250, etcd unauth on 2379, dashboards exposure, RBAC misconfig, and SA token abuse.
• Guided workflow covering dashboard exposure, secret leakage, and privilege escalation chains with real-world risk context.

Quick Start

Run the hunt-k8s workflow against your Kubernetes or containerized target to enumerate anonymous access, kubelet exposure, etcd access, Docker socket exposure, and SA token abuse.