I'd like to help with this. Is there a list of categories somewhere, or are you using a package that I can view for a list of categories?

Take a look here: https://github.com/aquasecurity/kube-hunter/blob/b2d2f5a01ae9c54714fa6d991887c5e3d51688c1/src/core/types.py#L54:L80

We should use a standard categorisation rather than making up a new one

hello @itaysk,
I would like to contribute to it.
Can you provide me redirection where you want to add meanings of the words?

The categories documentation should go here: https://github.com/aquasecurity/kube-hunter/blob/master/docs/index.md
This page currently contains a copy of the readme which is not ideal, so while you're at it you can delete that and just link to the readme instead.

hey @itaysk can i pick this up ?

I suppose you can but I have to say that there are fine nuances in these definitions that will probably require more than one iterations to fine tune. I you are confident that you fully understand these definitions than go ahead, thanks. @danielsagi do you have anything to add?

I suppose you can but I have to say that there are fine nuances in these definitions that will probably require more than one iterations to fine tune. I you are confident that you fully understand these definitions than go ahead, thanks. @danielsagi do you have anything to add?

Some more info and pointers to start will be much appreciated..

Hello! I'd love to help here!

Following along the "standard categorization", I got from #260 that MITRE CWE would be an appropriate choice.

But referring to the nuances @itaysk is referring to how would you prefer to address them? Without a complete understanding of the code and how those Categories are used within kube-hunter, understanding what is the correct nuance may be complicated.

For example InformationDisclosure may map to CWE-200: Exposure of Sensitive Information to an Unauthorized Actor or CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere. (I would ignore CWE-199: Information Management Errors as too broad).

Would you prefer a PR with a proposed solution where to discuss different options, an issue where to address each one separately or would you prefer using this issue and discuss all of them here?

Let me add that I love the work Aqua Security does so kudos to you!