Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

v1.8.0 to main #15

Merged
merged 27 commits into from
Oct 19, 2022
Merged

v1.8.0 to main #15

merged 27 commits into from
Oct 19, 2022

Conversation

sethsec-bf
Copy link
Contributor

Updated commands:

  • AWS/instances - Now checks all roles attached to instances to see if the role has administrative permissions

New commands:

  • AWS/lambdas - Lists the lambda functions in the account, including which one's have admin roles attached. Also gives you handy commands for downloading each function.
  • AWS/cloudformation - Lists the cloudformation stacks in the account. Generates loot file with stack details, stack parameters, and stack output - look for secrets.
  • AWS/ram - List all resources in this account that are shared with other accounts, or resources from other accounts that are shared with this account. Useful for cross-account attack paths.
  • AWS/tags - List all resources with tags, and all of the tags. This can be used similar to inventory as another method to identify what types of resources exist in an account.

Other:

  • AWS - New multi profile support with an -all-profiles option --profiles-list option - new in 1.7.2 (Thanks @dbravo-bishopfox)
  • AWS - New services added to inventory - new in 1.7.1 (Thanks @wdahlenburg)
  • AWS - Added profile name to module output to help when using the new multi profile support

…files, updated logrus so it could support one method calling another
Copy link
Contributor

@carlosvendramini-bf carlosvendramini-bf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Excellent changes and additions. Thank you @sethsec-bf, @dbravo-bishopfox, and @wdahlenburg!

@carlosvendramini-bf carlosvendramini-bf merged commit 530dcbd into main Oct 19, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants