Scanning Modules Guide

Modules:

• Clusters CVE's: Scan for Kubernetes cluster known CVEs
• Port scan: Port scanning with focus on Kubernetes services
• Services: Kubernetes service scan from within the container
• Deepce (https://github.com/stealthcopter/deepce):
  • Container ID & name (via reverse DNS)
  • Container IP / DNS Server
  • Docker Version
  • Interesting mounts
  • Passwords in common files
  • Environment variables
  • Password hashes
  • Common sensitive files stored in containers
  • Other containers on the same network
  • Port scan other containers, and the host machine itself
  • Find exposed docker sock
• Vulnerabilities test: Test which exploits does the running container is vulnerable to