Skip to content

v1.8.1

Choose a tag to compare

@github-actions github-actions released this 19 Oct 20:31
· 629 commits to main since this release
118ed62

New commands:

  • AWS/lambdas - Lists the lambda functions in the account, including which one's have admin roles attached. Also gives you handy commands for downloading each function.
  • AWS/cloudformation - Lists the cloudformation stacks in the account. Generates loot file with stack details, stack parameters, and stack output - look for secrets.
  • AWS/ram - List all resources in this account that are shared with other accounts, or resources from other accounts that are shared with this account. Useful for cross-account attack paths.
  • AWS/tags - List all resources with tags, and all of the tags. This can be used similar to inventory as another method to identify what types of resources exist in an account.

Updated commands:

  • AWS/instances - Now checks all roles attached to instances to see if the role has administrative permissions

Other:

  • AWS - New multi profile support with an -all-profiles option --profiles-list option - new in 1.7.2 (Thanks @dbravo-bishopfox)
  • AWS - New services added to inventory - new in 1.7.1 (Thanks @wdahlenburg)
  • AWS - Added profile name to module output to help when using the new multi profile support

Commits

  • 7c8afb6: added cloudformation command (sethsec-bf) #15
  • 5525266: Merge remote-tracking branch 'origin/main' into seth-dev (sethsec-bf) #15
  • 71e85c2: merged pr #8 into this branch and added the new for loop logic to cloudformation command (sethsec-bf) #15
  • 9498d2d: first draft of a tags command (sethsec-bf) #15
  • 45e548c: cleaned up tags command a bit (sethsec-bf) #15
  • 7d8ebc2: first draft of lambda commandd (sethsec-bf) #15
  • 8ce9a00: fixed bug in outbound-assumed-roles - missing add to wg counter (sethsec-bf) #15
  • 40d7a3c: added loot to lambda command, added unique resource total for tags command, bumped version to 1.8.0 (sethsec-bf) #15
  • dadef38: updated lambda to include isAdmin check, fixed some bugs wtih all profiles, updated logrus so it could support one method calling another (sethsec-bf) #15
  • 2e82cc8: updated readme (sethsec-bf) #15
  • 2656257: Update README.md (Seth Art) #15
  • ffa8e09: added profile name to stdout messages (sethsec-bf) #15
  • 5183b32: fixed panic when file with list of profiles is not present (sethsec-bf) #15
  • 6ace000: fixed panic in all profiles mode when either credentials or config do not exist. (sethsec-bf) #15
  • f672c34: updated lambda admin lookup map to that we can check local map to see if we know if the role is an admin already (sethsec-bf) #15
  • 3e07186: got admin check working on instances (sethsec-bf) #15
  • 064f285: cleaned up instances table (sethsec-bf) #15
  • eb95e88: finally got ram command working (sethsec-bf) #15
  • d20b2b1: remove debug test (sethsec-bf) #15
  • 9fc38f5: alphabetize module names and client order (sethsec-bf) #15
  • 775c233: updated cloudfox permissions policy (sethsec-bf) #15
  • 8850384: pre 1..8.0 release cleanup (sethsec-bf) #15
  • ca7df5a: update image in readme (sethsec-bf) #15
  • 1c243c7: Update README.md (Seth Art) #15
  • ecdd33c: removed public col from lambda -- not ready yet (sethsec-bf) #15
  • c3dac71: updated version to 1.8.0 in main.go (sethsec-bf) #15
  • 79eb720: updated readme (sethsec-bf) #15
  • 118ed62: fixed bug in lambda loot where it was missing a parameter (sethsec-bf)