• [Name] - Kubolt
• [Version] - Latest
• [Homepage] - https://github.com/averonesis/kubolt
• [Download] - git clone https://github.com/averonesis/kubolt
• [Author] - Anton Bulavin
• [Licence] - GNU General Public License v3.0
• [Description] - Kubolt is simple utility for scanning public unauthinticated kubernetes clusters and run commands inside containers
• [Dependencies] - https://github.com/averonesis/kubolt/blob/master/requirements.txt
  click==6.7
  shodan==1.7.7
  requests==2.18.4
• [Similar tools] - https://github.com/serain/kubelet-anon-rce (the main difference, that my tool designed to work with a big scopes from Shodan)
• [How to install] -
  git clone https://github.com/averonesis/kubolt
  cd kubolt
  mkdir output
  pip install -r requirements.txt
• [How to use] -
  python kubolt.py --query "org:'ACME Corporation' country:UK"
  https://github.com/averonesis/kubolt/raw/master/github-scale.gif

Nice tool - but we can't have that depancy with Shodan (how would you edit your API key when its packaged up?)

A lot of this could be repeated with a bit of cURL and bash loops too

Hello, @g0tmilk
What if I add a key to start with requirement to fill own Shodan API key?
And I'm not fully agree with bash scripting is the same, because kubolt is actually automate two processes:

• look for potentially vulnerable servers in Shodan
• check for vulnerability exploitation
  So, this could be highly useful if you start pentest some company and you know their ASN, for example :)
  Anyway, I know that recon-ng tool also have ability to input Shodan API key to perform scans - agree, this is not the same, but it's also have dependency on shodan in some way...
  And today I think every pentester has Shodan API key, as well as Shodan provide a free limited API key.

Thank you.

The sole input can't be from an online service (such as Shodan).
Manual import would be required.

ok, if I add a new feature as scan from list of IPs - kubolt would be accepted, right?

Sure =)