diff --git a/misconfiguration/kubernetes-exposed-metrics.yaml b/misconfiguration/kubernetes-exposed-metrics.yaml new file mode 100644 index 0000000000..f33fd429b0 --- /dev/null +++ b/misconfiguration/kubernetes-exposed-metrics.yaml @@ -0,0 +1,24 @@ +id: kubernetes-exposed-metrics +info: + name: Detect Kubernetes Exposed Metrics + author: pussycat0x + severity: low + description: Information Disclosure of Garbage Collection + tags: kubernetes,exposure, metrics +requests: + - method: GET + path: + - "{{BaseURL}}:8080/metrics" + matchers-condition: and + matchers: + - type: word + part: body + words: + - "namespace" + - "HELP" + - "TYPE" + - "kube" + condition: and + - type: status + status: + - 200 \ No newline at end of file diff --git a/misconfiguration/node-exporter-metrics.yaml b/misconfiguration/node-exporter-metrics.yaml new file mode 100644 index 0000000000..5320578547 --- /dev/null +++ b/misconfiguration/node-exporter-metrics.yaml @@ -0,0 +1,27 @@ +id: node-exporter-metrics +info: + name: Detect Node Exporter Metrics + author: pussycat0x + severity: low + description: Information Disclosure of Garbage Collection + tags: node,exposure, metrics +requests: + - method: GET + path: + - "{{BaseURL}}:9100/metrics" + matchers-condition: and + matchers: + - type: word + part: body + words: + - "go_goroutines" + - "HELP" + - "gauge" + - "node_cooling_device" + - "node_network" + - "boot" + - "TYPE go_goroutines gauge" + condition: and + - type: status + status: + - 200 \ No newline at end of file diff --git a/misconfiguration/overview-kubernetes-resource-report.yaml b/misconfiguration/overview-kubernetes-resource-report.yaml new file mode 100644 index 0000000000..76c3dbd457 --- /dev/null +++ b/misconfiguration/overview-kubernetes-resource-report.yaml @@ -0,0 +1,25 @@ +id: overview-kubernetes-resource-report +info: + name: Detect Overview Kubernetes Resource Report + author: pussycat0x + severity: medium + description: Information Disclosure of Kubernetes Resource Report + tags: Kubernetes,exposure +requests: + - method: GET + path: + - "{{BaseURL}}:9100/metrics" + matchers-condition: and + matchers: + - type: word + part: body + words: + - "