kube-hunter

What is kube-hunter?

kube-hunter hunts for security weaknesses in Kubernetes (authorized only).

Pentest your own kind/minikube/prod-with-permission clusters.

Official website: kube-hunter · Documentation

When do you use it?

• You need Pen-test Kubernetes clusters (authorized only).
• You are following a CYNARKS lab or authorized engagement that calls for kube-hunter.
• You already tried simpler checks and need this tool’s deeper capability.

When not to use it

• Never scan clusters you do not own.

Who uses it?

• Cloud security engineers
• DevSecOps
• Platform / SRE security

How do you use it? (typical flow)

1. Install kube-hunter using the steps below (prefer Kali package or official installer).
2. Confirm you have authorization for the target (lab VM, own system, or written scope).
3. Run --help / man (or the Help section) to see current flags for your version.
4. Start with a safe example from Basic commands against localhost or an authorized lab target.
5. Record what you ran, what you observed, and any follow-up (filter, report, remediation).

Help & manual (like man / --help)

Every serious tool has a built-in way to look up flags. Learn these first so you are not stuck memorizing every option.

1. 1. Help

   kube-hunter --help

1. Installation

2. Basic commands

1. 1. Only with written permission

   kube-hunter --remote some.lab.local

   Only with written permission

2. 2. Show help

   kube-hunter --help

   List flags for your installed version (same habit as man/--help).

3. 3. Short help

   kube-hunter -h

   Alternate help flag when supported.

5. Useful features

• Active/passive modes

6. Practical examples

1. Example 1: Only with written permission

   kube-hunter --remote some.lab.local

   Only with written permission

2. Example 2: Show help

   kube-hunter --help

   List flags for your installed version (same habit as man/--help).

3. Example 3: Short help

   kube-hunter -h

   Alternate help flag when supported.

7. Important notes

• Never scan clusters you do not own.
• Authorized targets only — labs, systems you own, or written permission.
• Prefer reading --help / man / official docs for your installed version; flags change over time.