skills.rest
bpnrockstar
bpnrockstarCOMMUNITY
Explore all skills by this author →
GitHub

hunt-k8s

Scan Kubernetes and Docker environments for security vulnerabilities and misconfigurations.

Updated Jul 1, 2026
Search Tags:#etcd#container escape#Kubernetes security#Docker security#Kubelet
One-click install
npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill hunt-k8s-bpnrockstar
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-k8s
Source: https://github.com/bpnrockstar/UnifiedBugHunter/tree/main/skills/hunt-k8s
Command: npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill hunt-k8s-bpnrockstar

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires kube-python, etcd3, requests, curl, and includes scripts (resource) and references (resource) components.

What problem does it solve?

The hunt-k8s skill identifies and assesses security vulnerabilities within Kubernetes and Docker environments by actively probing and auditing their configurations, services, and controls.

Core Features & Use Cases

  • API Vulnerability Scanning: Detects misconfigurations and unauthorized access within Kubernetes APIs.
  • Kubelet Enumeration: Gathers information and attempts remote execution through Kubelet.
  • etcd Authentication Bypass: Tests for unauthenticated access to the etcd database.
  • Docker Socket Exploitation: Checks for Docker socket exposure and potential host system compromise.
  • Container Escape: Identifies potential container escape vulnerabilities, particularly through runc.
  • Use Case: This skill can be used by security auditors to assess the security posture of Kubernetes and Docker-based infrastructures.

Quick Start

Run the hunt-k8s skill to scan for potential security vulnerabilities in your Kubernetes cluster.

Frequently Asked Questions about hunt-k8s

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Kubernetes APIs for misconfigurations and unauthorized access?▼

Scanning Kubernetes APIs for misconfigurations involves probing endpoints to identify unauthorized access paths and authentication bypasses. This skill performs detailed API authentication checks to assess your cluster's security posture and detect vulnerabilities.

How does etcd authentication bypass testing work in Kubernetes?▼

Etcd authentication bypass testing checks for unauthenticated access to the etcd database where cluster state is stored. This skill probes the database to identify exposed credentials or unauthorized data retrieval paths.

Can I detect Docker socket exposure and potential container escape vulnerabilities?▼

You can detect Docker socket exposure by checking for accessible container runtime sockets that allow host system compromise. This skill identifies container escape vulnerabilities through runc and exposed Docker sockets to prevent unauthorized host access.

What is Kubernetes Kubelet enumeration and remote execution testing?▼

Kubelet enumeration gathers information from Kubelet services and attempts remote command execution through the node API. This skill scans Kubelet endpoints to identify unauthorized access paths and potential execution vulnerabilities.

Do I need kube-python and etcd3 to perform Docker and Kubernetes security scanning?▼

You need kube-python, etcd3, requests, and curl dependencies to perform Kubernetes and Docker security scanning. These tools provide API authentication, network enumeration, and container introspection capabilities required for vulnerability assessment.

What is the best way to assess container escape points in a Kubernetes cluster?▼

Assessing container escape points involves scanning container environments for runc vulnerabilities and Docker socket exposure. This skill identifies potential host system compromise paths through detailed container introspection and configuration auditing.

Related Skills

xalgordxalgord
846

kubernetes-security

Audit Kubernetes deployments for misconfigurations and insecure access vectors.

Community
Advanced
tillysosotillysoso

typescript-security-review

Review TypeScript/Node.js projects for vulnerabilities and misconfigurations.

Community
Advanced
ArianHobson333ArianHobson333
7

cloud-containers

Automate enumeration and security assessment of AWS, Azure, GCP, Docker, and Kubernetes environments.

Community
Advanced
vertivolatamvertivolatam
1

Security & Compliance Automation

Automate security and compliance checks for cloud-native environments using OPA, Trivy, and boto3.

Official
Advanced