You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
AWS/lambdas - Lists the lambda functions in the account, including which one's have admin roles attached. Also gives you handy commands for downloading each function.
AWS/cloudformation - Lists the cloudformation stacks in the account. Generates loot file with stack details, stack parameters, and stack output - look for secrets.
AWS/ram - List all resources in this account that are shared with other accounts, or resources from other accounts that are shared with this account. Useful for cross-account attack paths.
AWS/tags - List all resources with tags, and all of the tags. This can be used similar to inventory as another method to identify what types of resources exist in an account.
Updated commands:
AWS/instances - Now checks all roles attached to instances to see if the role has administrative permissions
Other:
AWS - New multi profile support with an -all-profiles option --profiles-list option - new in 1.7.2 (Thanks @dbravo-bishopfox)
AWS - New services added to inventory - new in 1.7.1 (Thanks @wdahlenburg)
AWS - Added profile name to module output to help when using the new multi profile support
5525266: Merge remote-tracking branch 'origin/main' into seth-dev (sethsec-bf) #15
71e85c2: merged pr #8 into this branch and added the new for loop logic to cloudformation command (sethsec-bf) #15
9498d2d: first draft of a tags command (sethsec-bf) #15
45e548c: cleaned up tags command a bit (sethsec-bf) #15
7d8ebc2: first draft of lambda commandd (sethsec-bf) #15
8ce9a00: fixed bug in outbound-assumed-roles - missing add to wg counter (sethsec-bf) #15
40d7a3c: added loot to lambda command, added unique resource total for tags command, bumped version to 1.8.0 (sethsec-bf) #15
dadef38: updated lambda to include isAdmin check, fixed some bugs wtih all profiles, updated logrus so it could support one method calling another (sethsec-bf) #15