v1.10.0

AWS

New commands:

• network-ports - Enumerates AWS services that are potentially exposing a network service. The security groups and the network ACLs are parsed for each resource to determine what ports are potentially exposed. (thanks @wdahlenburg)
• sns - Enumerates all of the SNS topics and gives you the commands to subscribe to a topic or send messages to a topic. Only deals with topics, and not the SMS functionality. Also attempts to summarize topic resource policies if they exist. (thanks @DominicBreuker)
• sqs - Enumerates all of the SQS queues and gives you the commands to receive messages from a queue and send messages to a queue. Also attempts to summarize queue resource policies if they exist. (thanks @DominicBreuker)

Updates:

• Inventory command now gives you a loot file of arns of every identified resource
• Removed pmapper columns from other commands when pmapper data is not found
• Fixed bug in permissions command where notaction permissions were being listed as allowed

Azure

New Commands

• inventory - Enumerates all resources at the subscription level.

Updated Commands

• storage - The storage command now includes public blob URL enumeration

Commits

• ca66af7: Basic Network ACL and Security Group parsing. Support for EC2 and RDS network ports. (Wyatt Dahlenburg) #19
• a09b549: Merge branch 'main' into network-services (Wyatt Dahlenburg) #19
• 01267d5: add SNS and SQS commands with unit tests (Dominic Breuker) #21
• 0ceaa0a: use in-memory filesystem for unit tests (Dominic Breuker) #21
• 6e9aa37: Refactor + Merge of Lightsail, ELBv2, ECS, ElastiCache, & EFS detections (Wyatt Dahlenburg) #19
• 2b04fbb: Merge branch 'main' into network-services (Wyatt Dahlenburg) #19
• 5e87e96: made some superficial updates before merge with main (sethsec-bf) #19
• 1ffd763: updated network-ports sections of cli/aws to incorporate new structure (sethsec-bf) #19
• 1c64fa5: added new 1.9.0 smart service logic (sethsec-bf) #19
• a0c8e4b: Including ElastiCache in the cloudfox AWS policy (Wyatt Dahlenburg) #19
• f514b80: adding logic to ignore icmp (sethsec-bf) #19
• c265e5c: Merge branch 'network-services' of github.com:wdahlenburg/cloudfox into network-services (sethsec-bf) #19
• 91aa229: Restrict the processed security group rules to ALL, TCP, and UDP (Wyatt Dahlenburg) #19
• abeaa25: bumping version and adding prerelease notation before pushing to main (sethsec-bf) #19
• 7ec51b1: incorporated new changes from v1.9.0 into this PR (sethsec-bf) #21
• 767d2e6: added region check for each service to new commands (sethsec-bf) #21
• 3d054ea: the test run complained about a fmt error in networkports (sethsec-bf) #21
• 78cdf2e: updated readme to include network-ports from #19 (Seth Art)
• b64526f: initial draft of adding more context to sqs table (sethsec-bf) #21
• 4081025: wrote a prototype for az public blobs enumeration (carlosvendramini-bf) #31
• bb1f338: added wiki link to network-ports command (sethsec-bf) #29
• 8b5f79d: fixed pmapper path creation in linux to fix #28 (sethsec-bf) #29
• 7058d45: updated pmapper error state to point to wiki for next steps (sethsec-bf) #29
• 6599ad2: public blob enumeration almost done, just need to add URLs to loot file (carlosvendramini) #31
• ba57a02: az blob enumeration complete, also added loot file with urls, need to add unit tests (carlosvendramini) #31
• f1670f6: added new potential output design (carlosvendramini) #31
• 78ff665: finished new potential new output design, still need to discuss and test (carlosvendramini) #31
• 99b798b: finished the az inventory module PoC code (carlosvendramini) #31
• 2e8a454: output redesign ready for testing in prod (carlosvendramini) #31
• 466c8fc: small bug fix on output (carlosvendramini) #31
• dc7560c: added az inventory per subscription (carlosvendramini) #31
• cd66bbf: updated sns/sqs/buckets commands - likely going to remove this (sethsec-bf) #21
• f207a7c: updated sns/sqs/buckets commands - likely going to remove this (sethsec-bf) #21
• ac21f3a: finally got something worth pushing (sethsec-bf) #21
• 7c55958: added loot command output to sqs and sns (sethsec-bf) #21
• dbc9b1c: added a max flag for the tags command because some accounts have hundreds of thousands of tags. (sethsec-bf) #30
• 6aae684: added test for tags command (sethsec-bf) #30
• 152f7ea: added loot file to inventory which lists all identified arns (sethsec-bf) #30
• 5126020: removed pmapper column from output when pmapper data is not found (sethsec-bf) #30
• 2563ebb: removed pmapper column from output when pmapper data is not found (sethsec-bf) #30
• 3238ac8: switch awsservicemap behavior to pull latest servicemap from aws (sethsec-bf) #30
• b9f9a4f: updated some iam-simulator default actions (sethsec-bf) #30
• a8b73ef: Merge remote-tracking branch 'origin/seth-dev' into carlos-dev (carlosvendramini) #31
• 40933e2: fixed bug in permissions command where notaction permissions were being listed as allowed (sethsec-bf) #30
• 31027ba: updated all of the tests for sns/sqs/buckets to work with the new code (sethsec-bf) #21
• 303341c: updated the buckets test to use the big table string as the comparable like sns/sqs (sethsec-bf) #21
• 2b686e9: Merge remote-tracking branch 'origin' into seth-dev (sethsec-bf) #30
• 2e65bb3: added sqs and sns to readme (Seth Art)
• 96587ff: Update README.md (Seth Art)
• 41be219: added blobs test data (carlosvendramini) #31
• fc736f4: updated version tag to 1.10.0 (carlosvendramini)
• bb1313c: Bump golang.org/x/net from 0.2.0 to 0.7.0 (dependabot[bot]) #32
• 05481ae: az storage command now uses head method instead of get to check public blob URL (carlosvendramini)