Skip to content

Commit 8d7b7d3

Browse files
committed
update tool list by deprecating various tools that appear to be unmaintained
1 parent 99570d8 commit 8d7b7d3

File tree

1 file changed

+7
-9
lines changed

1 file changed

+7
-9
lines changed

general_information/tools_list.md

Lines changed: 7 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -24,8 +24,7 @@ Useful tools to run inside a container to assess the sandbox that's in use, and
2424
* [Checkov](https://github.com/bridgecrewio/checkov) - IaC scanner
2525
* [KICS](https://github.com/Checkmarx/kics) - IaC scanner
2626
* [dep-scan](https://github.com/AppThreat/dep-scan) - Vulnerability and mis-configuration scanner
27-
* [Terrascan](https://github.com/tenable/terrascan) - IAC Scanner for various formats including Docker and Kubernetes
28-
* [hadolint](https://github.com/hadolint/hadolint) - Docker file linter
27+
2928

3029
## Docker Security Tools
3130

@@ -64,7 +63,6 @@ Useful tools to run inside a container to assess the sandbox that's in use, and
6463

6564
* [kube-bench](https://github.com/aquasecurity/kube-bench) - Tool to assess compliance with the CIS benchmark for various Kubernetes distributions
6665
* [kubescape](https://github.com/armosec/kubescape) - Kubernetes security assessment tool
67-
* [kubeaudit](https://github.com/Shopify/kubeaudit) - Kubernetes security assessment tool focusing on workload security
6866
* [kubesec](https://github.com/controlplaneio/kubesec) - Kubernetes security assessment tool focusing on workload security
6967
* [kubescore](https://github.com/zegl/kube-score) - Kubernetes security and reliability assessment tool focusing on workload security.
7068
* [eathar](https://github.com/raesene/eathar) - Kubernetes security assessment tool focusing on workload security and RBAC.
@@ -75,7 +73,6 @@ Useful tools to run inside a container to assess the sandbox that's in use, and
7573
### Kubernetes Penetration Testing Tools
7674

7775
* [peirates](https://github.com/inguardians/peirates) - Kubernetes container breakout tool
78-
* [kdigger](https://github.com/quarkslab/kdigger) - Kubernetes breakout/discovery tool
7976
* [teisteanas](https://github.com/raesene/teisteanas) - Tool to create kubeconfig files based on the CertificateSigningRequest API.
8077
* [tòcan](https://github.com/raesene/tocan) - Tool to create kubeconfig files based on the TokenRequest API.
8178
* [MKAT](https://github.com/DataDog/managed-kubernetes-auditing-toolkit/) - Managed Kubernetes Auditing Tool. Focuses on exploring security issues in managed Kubernetes (e.g. EKS)
@@ -88,10 +85,6 @@ Useful tools to run inside a container to assess the sandbox that's in use, and
8885
* [kubeletctl](https://github.com/cyberark/kubeletctl) - This is a good tool to automate the process of assessing a kubelet instance. If the instance is vulnerable it can also carry out some exploit tasks
8986
* [kubelet dumper](https://github.com/raesene/kubelet_dumper) - PoC tool to dump Kubelet configurations for review.
9087

91-
### etcd Tools
92-
93-
* [auger](https://github.com/jpbetz/auger) - Tool for decoding information pulled directly from the etcd database
94-
9588
### Security Observability Tools
9689

9790
* [ThreatMapper](https://github.com/deepfence/ThreatMapper). Cloud + Container Security observability
@@ -136,4 +129,9 @@ Inevitably over time, some tools will become unmaintained and deprecated. Whilst
136129
* [kubestalk](https://github.com/redhuntlabs/kubestalk) - Black Box Kubernetes Pentesting Tool.
137130
* [kubedagger](https://github.com/yasindce1998/KubeDagger) - Kubernetes offensive framework built in eBPF.
138131
* [kubesploit](https://github.com/cyberark/kubesploit) - Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments
139-
* [k8spot](https://github.com/Maddosaurus/k8spot) - Kubernetes honeypot.
132+
* [k8spot](https://github.com/Maddosaurus/k8spot) - Kubernetes honeypot.
133+
* [Terrascan](https://github.com/tenable/terrascan) - IAC Scanner for various formats including Docker and Kubernetes
134+
* [hadolint](https://github.com/hadolint/hadolint) - Docker file linter
135+
* [kubeaudit](https://github.com/Shopify/kubeaudit) - Kubernetes security assessment tool focusing on workload security
136+
* [kdigger](https://github.com/quarkslab/kdigger) - Kubernetes breakout/discovery tool
137+
* [auger](https://github.com/jpbetz/auger) - Tool for decoding information pulled directly from the etcd database

0 commit comments

Comments
 (0)