id: kubernetes-metrics info: name: Detect Kubernetes Exposed Metrics author: pussycat0x severity: low description: Information Disclosure of Garbage Collection reference: - https://kubernetes.io/docs/concepts/cluster-administration/system-metrics/#metrics-in-kubernetes tags: kubernetes,exposure,devops http: - method: GET path: - "{{BaseURL}}/metrics" matchers-condition: and matchers: - type: word part: body condition: and words: - "namespace" - "HELP" - "TYPE" - "kube" - type: status status: - 200