Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Dev #110

Merged
merged 32 commits into from
Oct 1, 2018
Merged

Dev #110

merged 32 commits into from
Oct 1, 2018

Conversation

SpenGietz
Copy link
Contributor

  • Added assumed-role support for permissions enumeration and privilege escalation modules
  • Call the AWS CLI directly from Pacu now
  • Added the "import_keys" command to import credential profiles directly from ~/.aws/credentials to your Pacu session
  • Other misc fixes/changes

Database structure has been updated so backup old databases as new ones are required for this update.

Alexander Morgenstern and others added 30 commits September 19, 2018 12:01
Fixed error not removing data, shortened print statements, and added …
b157afa 
…more info to summary
Added completion print statement to Pacu core
b2a3b0b
Handled False-positive error when DryRunOperation is raised
db6db06
Only reporting on fields that should be enumerated
70f0526
Reduced output and unnecessary prompts
3aeab79
Updated references to old file name
5c9748a
Removed references to old file name
a08b65f
Updated references to old file name
fe6c8cc
Removed module completion messages
9e33337
Added message about skipping enumeration of failed DryRun resources
f2c6310
@SpenGietz
Merge pull request #100 from RhinoSecurityLabs/feature/add_completion…
a22de83 
…_to_core

Feature/add completion to core
Clarified resource types that failed to be enumerated during DryRun f…
c22fca7 
…or ec2__enum
Linting commit
80b29ae
@SpenGietz
Merge pull request #97 from RhinoSecurityLabs/bug/enumerating_resources
403afdf 
Fixed error not removing data, shortened print statements, and added …
@SpenGietz
output condensing in pacu.py
fa3bfba
@SpenGietz
small wording tweaks
034988f
@SpenGietz
spelling issue and command change
84d8d4a
@SpenGietz
Merge pull request #103 from RhinoSecurityLabs/less-pacu-output
79353ca 
Less pacu output
@SpenGietz
added awscli warning
7f0e159
@SpenGietz
Merge pull request #104 from RhinoSecurityLabs/less-pacu-output
26d6718 
added awscli warning
@SpenGietz
added role_name to the database and changed user_arn to arn across al…
eb7445d 
…l files
@SpenGietz
added support for --role-name and --all-roles to iam__enum_permissions
29617d3
@SpenGietz
Added privesc_scan support for role privilege escalation in offline mode
af31237
@SpenGietz
added offline privesc scan summary output
8aa6d89
@SpenGietz
fixed enum_perms bug and added --scan-only support for roles to prive…
b18f44b 
…sc scan
@SpenGietz
linting fixes
fa73b51
@SpenGietz
one more print fix
e53fa06
@BenFriedland-Rhino
Merge pull request #106 from RhinoSecurityLabs/assume-role-support
c181f68 
Add assume role support
@SpenGietz
added import_keys pacu command to import keys from ~/.aws/credentials
762b48f
@SpenGietz
session -> boto3_session and import_awscli_keys -> parse_awscli_keys_…
0bee4aa 
…import
SpenGietz and others added 2 commits October 1, 2018 09:47
@SpenGietz
fixed undefined variable problem
88d2284
@BenFriedland-Rhino
Merge pull request #109 from RhinoSecurityLabs/import_keys
09dc5c4 
Added import_keys command to load keys from ~/.aws/credentials
@SpenGietz SpenGietz requested a review from a team as a code owner October 1, 2018 16:59
@SpenGietz SpenGietz merged commit ac214d0 into master Oct 1, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@SpenGietz @BenFriedland-Rhino