kube-hunter

Remove scapy usage (#500)

• removed arp and dns hunters usage due to it's violations of the scapy GPL2 license

• added installation of arp and dns hunters to Dockerfile

• added explicit new version to plugins in dockerfile installation

• ignore B020 flake8

Fix: Removed automatic import of handler object (#506)

• removed automatic import of handler object in events package and renamed handler.py to event_handler.py to solve name collision

• Ignore https certificate verification on dispatchers (#484)
• Added correct exception handling for discovery of Metadata apis (#488)
• Added MITRE documentation in README (#485)

Feature: Changed vulnerability categories to support MITRE ATT&CK (#474)

• Refactored all categories to the new MITRE attack matrix format
• Changed format of vulnerabilities table to display the mitre technique related to the vulnerability

• Feature: New Service Account Token Flag (#463)
• changed exception logs to debug logs in kubernetes_client nodes discovery (#470)

Stable version

• Updated KB links to point to Aqua Vulnerability Database (new avd_reference link in json output)
• Bugfix: false positive on passive discovering an open /run debug handler
• More intuitive message when ProveSystemLogs cannot find evidence
• Added new KHV for exposed pods

• Fixed a bug in certificate hunting
• Fixed critical bug in ARP spoofing hunting
• Fixed multiple bugs in Etcd hunting
• Fixed critical bugs in Kubelet hunting
• Refactored argument parsing
• Improvements on imports
• Added dynamic plugins support using pluggy project
• Added Two new Kubelet Hunters:
  • ProveAnonymousAuth
  • MaliciousIntentViaSecureKubeletPort
• Added multistage to Dockerfile and general improvements
• Increased Evidence field preview length in table logs
• Fixed bugs and improved AzureSpnHunter

• Remove support of plugins
• Refactored dynamic imports into static ones
• Add timeout for network operations
• Improve logging
• Optimize cloud discovery
• Enforcing code linting
• Support ignoring addresses when scanning subnets

#300 Fix Dockerfile build
Cache dependencies for docker build

#281 Fix empty report
#283 Refactor configuration
#298 Add Makefile
#299 Correct KB link

From now on we will be tagging releases!