Joseph Barcia
7727d1d08c
Fix pmapper-data-basepath ignored in all-checks and race condition in instances module
...
The pmapperCommand in runAllChecksCommand was missing the
PmapperDataBasePath parameter, causing --pmapper-data-basepath to be
ignored for the pmapper module when running all-checks. (Fixes #105 )
The instances module had a race condition where role analysis ran before
the receiver goroutine finished collecting all MappedInstances. This
caused IsAdminRole and CanPrivEscToAdmin columns to appear empty in
all-checks despite pmapper data being available. Fixed by signaling
the receiver to stop and waiting for it to drain before running role
analysis.
Version bumped to 2.0.4.
2026-04-21 13:06:11 +00:00
Open Source Contributor
008fb84d23
Fix --pmapper-data-basepath ignored in all-checks for EC2 user data module
...
The EC2 user data InstancesModule in runAllChecksCommand was not receiving
the PmapperDataBasePath parameter, causing the --pmapper-data-basepath flag
to be ignored when running all-checks.
Fix: Add PmapperDataBasePath: PmapperDataBasePath to the ec2UserData struct
initialization in runAllChecksCommand.
2026-04-20 20:38:56 -06:00
jbarciabf
a3b7ab4269
rename buckets -> storage
2026-02-26 15:01:18 -05:00
jbarciabf
60c6b8d61c
added log-enum, bigquery-enum, bigtable-enum, spanner-enum to search for sensitive stored data
2026-02-26 12:55:50 -05:00
jbarciabf
d021ea54de
cleanup output, better streaming and file splitting
2026-02-19 18:17:24 -05:00
jbarciabf
7a18090609
removed attackpath and orgcache flags and enable by default
2026-02-16 15:17:04 -05:00
jbarciabf
cb8be678e7
removed attack paths to use foxmapper instead
2026-02-15 23:02:27 -05:00
jbarciabf
de141300e9
fixed enumerate regions where permissions were sometimes denied
2026-02-04 20:35:44 -05:00
jbarciabf
eb76d76dea
physical cache instead of memory. 1st wave of cleanup
2026-02-04 14:15:16 -05:00
jbarciabf
d24f817bf9
changed global all projects flag
2026-01-20 14:33:22 -05:00
jbarciabf
888649616f
added attackpath flag
2026-01-16 00:32:45 -05:00
jbarciabf
2b272a1335
merged privesc, lat movemet, and data exfil into attack paths
2026-01-16 00:21:08 -05:00
jbarciabf
31e2fe5fcb
fixed privesc execution and output issues
2026-01-14 15:25:47 -05:00
jbarciabf
06a9dabf48
refactored output to be hierarchical, added privesc checks
2026-01-14 14:51:54 -05:00
jbarciabf
7bb7d947ef
fixed logging newline, more 400 errors, text formatting, and enhancements in dns, filestore, endpoints, and dataefil
2026-01-13 15:22:36 -05:00
jbarciabf
36b45a64c5
rework
2026-01-12 21:08:19 -05:00
jbarciabf
0df2aa9240
updated to include all-projects and added project name to output
2025-12-30 13:32:16 -05:00
jbarciabf
69c9070009
updates
2025-12-28 15:23:44 -05:00
jbarciabf
8f6208d983
Merge remote-tracking branch 'upstream/main' into cloudfox-gcp-new
2025-12-17 14:52:35 -05:00
jbarciabf
83d9611732
init
2025-12-17 14:52:06 -05:00
Seth Art
16b3c66624
Unified logging around logrus. removed standard logging lines.
2025-12-15 13:33:54 -05:00
Seth Art
521cf7e4f4
Reduced the number of times awsservicemap calls out to get the AWS json
2025-12-15 13:33:54 -05:00
Seth Art
d0de59dbe4
update opensearch mod
2025-04-21 10:19:06 -04:00
edops973
0deb568e41
Get open search policies
2025-03-15 22:47:43 +07:00
edops973
e54ffe8ce7
Merge conflict
2025-03-15 22:43:21 +07:00
edops973
43fe99e832
Merge conflict
2025-03-15 22:35:23 +07:00
edops973
a104639354
Merge conflict
2025-03-15 22:01:17 +07:00
edops973
296710c474
Merge conflict
2025-03-15 21:56:19 +07:00
edops973
caaf399e9d
Add feature flag for KMS service in resource-trusts command
2025-03-14 18:02:13 +07:00
edops973
cae31fbf21
fix kms client nil when running all-checks command
2025-03-14 18:01:52 +07:00
edops973
4e75b1151b
Add resource-trusts KMS unit test
2025-03-14 18:01:43 +07:00
Seth Art
878d7ec0c4
Fixed bug in cape where files did not exist crash. Fixed bug that duplicated edges because of magenta.
2024-10-15 16:16:31 -04:00
Seth Art
8e1e8d0c0a
Fix for cape that also makes edges for cross-account explicit trusts. Also added a new flag to ignore certain edges entirely.
2024-10-10 18:23:54 -04:00
Seth Art
b31f36746b
added the the --admin-check-only flag to iam-simulator command
2024-09-23 13:47:07 -04:00
sethsec-bf
a8d2bfbfb3
Removed graph command from cobra for now
2024-04-16 14:18:47 -04:00
sethsec-bf
22417f174b
spelling
2024-04-16 11:54:10 -04:00
sethsec-bf
77cd08b8d5
updated gcp verbosity, updated cape command usage, switched version tracking file from main.go to internal/utils.go
2024-04-16 11:24:18 -04:00
sethsec-bf
57194ef3e0
bump to version 1.14.0, merged gcp and aws ds functionality
2024-04-16 10:32:19 -04:00
sethsec-bf
82635fd44f
made aws sso like eks, where edges are not created if it's if the provider is in the same account as the role that trusts it. the edges will still show up cross account though.
2024-04-16 10:28:15 -04:00
sethsec-bf
6e52e5ee7b
merge gcp stuff from main into this branch
2024-04-15 16:33:09 -04:00
David
23e8878e49
Merge branch 'main' into feature/gcp-v1
2024-04-12 01:04:49 +00:00
sethsec-bf
356d57b2de
Added pmapper basepath to all relevent commands. Improved logging for cape/cape-tui. Fixed codebuld cache bug.
2024-04-10 11:49:33 -04:00
sethsec-bf
3a45583015
Got cape working without any aws calls, cleaned up logging messages
2024-04-05 16:07:37 -04:00
Bastien Faure
de492fa6e9
Add Directory Service support for AWS
2024-04-02 11:49:45 -07:00
David
dee22b3ebc
fix logging issue and improve whoami
2024-03-29 19:44:17 +00:00
sethsec-bf
fca22ceb6b
renamed to cape, added hop count logic, pulled privesc function out so i can add logic to handle cobra flags
2024-03-28 15:06:41 -04:00
sethsec-bf
4ef87d8b98
updated caper to use new version of parseFederatedRoleTrusts from the role-trusts command. Also changed the way vendors and federated identities are labled
2024-03-22 08:58:05 -04:00
David
334583d3a2
save work whomai account stub
2024-03-21 22:38:02 +00:00
sethsec-bf
8fac75ed11
merged from main
2024-03-21 09:58:35 -04:00
sethsec-bf
3ff704e98f
merged from main
2024-03-21 09:56:18 -04:00
Joseph Barcia