KubiScan
Permission scanner
Automates the identification of risky permissions in Kubernetes clusters.
A tool to scan Kubernetes cluster for risky permissions
1k stars
29 watching
130 forks
Language: Python
last commit: about 1 month ago
Linked from 4 awesome lists
authorizationconjbotkubernetesrbac
tomhuang12/awesome-k8s-resources
rootsongjc/awesome-cloud-native
teamssix/awesome-cloud-security
metarget/awesome-cloud-native-securityRelated projects:
| Repository | Description | Stars |
|---|---|---|
 aquasecurity/kubectl-who-can | An tool to show who has permissions to perform actions on Kubernetes resources | 850 |
 controlplaneio/kubectl-kubesec | Scans Kubernetes resources for security vulnerabilities using kubesec.io | 510 |
| cyberark/blobhunter | Identifies publicly accessible Azure blob storage containers | 321 |
 vchinnipilli/kubestriker | Automates security audits of Kubernetes clusters to identify misconfigurations and vulnerabilities | 992 |
| controlplaneio/kubesec | Analyzes Kubernetes resources for security vulnerabilities | 1,255 |
 corneliusweig/rakkess | Tool to display access rights for resources in a Kubernetes cluster | 1,324 |
 carbonetes/kubectl-carbonetes-scan | Analyzes container images for security vulnerabilities and policy compliance | 2 |
| cyberark/skyark | A cloud security tool that discovers and secures privileged entities in Azure and AWS environments. | 877 |
 alexivkin/kubepwn | A collection of resources and tools for testing, analyzing, and securing Kubernetes clusters | 54 |
 yogeshkk/k8spurger | A script that scans Kubernetes clusters for unused resources and reports them in a usable format. | 254 |
| cyberark/kubeletctl | A command-line tool for interacting with the Kubernetes kubelet API | 749 |
 team-soteria/rback | A tool that visualizes the Role-Based Access Control (RBAC) structure of a Kubernetes cluster | 401 |
 quarkslab/kdigger | A Kubernetes-focused container assessment and context discovery tool for penetration testing. | 441 |
 kajanth/kubectl-all | A kubectl plugin to list all resources in a Kubernetes namespace | 3 |
| cyberark/aclight | A tool for discovering privileged accounts in networks by analyzing access control lists and permissions. | 791 |