Enumerate Kubernetes Services

k8s_dns_enum.py

import socket

# Resolve DNS
resolver = socket.getaddrinfo("any.any.svc.cluster.local", None)

ports = []
hosts = []

print("Services and ports running in this cluster")
print("------------------------------------------")
for result in resolver:
    _, _, _, _, address = result
    host = address[0]
    port = address[1]
    ports.append(port)
    hosts.append(host)
    name = host.split(".")[0]
    namespace = host.split(".")[1]
    print(f"Service: {name} in namespace: {namespace} on port: {port}")

ports = list(set(ports))
hosts = list(set(hosts))

print("\n\n\nnmap command to scan the cluster network")
print("----------------------------------------------")
print(f"nmap -sTVC -v -n -p {','.join(map(str, ports))} {' '.join(hosts)}")