 Joseph Barcia
|
146034d619
|
Update AWS SDK to fix EventStream decoder panic (GHSA-xmrv-pmrh-hhx2)
Updates aws-sdk-go-v2/aws/protocol/eventstream to v1.7.8,
service/s3 to v1.97.3, service/lambda to v1.88.5, and
service/kinesis to v1.43.5.
|
2026-04-13 12:59:37 +00:00 |
|
|
Joseph Barcia
|
9e056b29d7
|
Update opentelemetry-go to v1.43.0 and go-jose to v4.1.4
Fixes CVE-2026-39883 (PATH hijacking in otel SDK) and
CVE-2026-34986 (panic in JWE decryption in go-jose).
|
2026-04-13 12:55:22 +00:00 |
|
|
Joseph Barcia
|
83f9af249d
|
Update google.golang.org/grpc to v1.79.3 to fix GO-2026-4762
Fixes authorization bypass via missing leading slash in :path header.
|
2026-04-12 17:40:35 +00:00 |
|
|
jbarciabf
|
4f2c2cb4c9
|
Bump go.opentelemetry.io/otel/sdk to v1.40.0 (CVE-2026-24051)
Fixes PATH hijacking vulnerability in the OTel Go SDK on macOS/Darwin.
|
2026-03-05 08:17:36 -05:00 |
|
|
jbarciabf
|
36b45a64c5
|
rework
|
2026-01-12 21:08:19 -05:00 |
|
|
jbarciabf
|
abf1543b3e
|
added new modules
|
2025-12-30 09:38:32 -05:00 |
|
|
jbarciabf
|
69c9070009
|
updates
|
2025-12-28 15:23:44 -05:00 |
|
|
Seth Art
|
521cf7e4f4
|
Reduced the number of times awsservicemap calls out to get the AWS json
|
2025-12-15 13:33:54 -05:00 |
|
|
Seth Art
|
d0de59dbe4
|
update opensearch mod
|
2025-04-21 10:19:06 -04:00 |
|
|
edops973
|
0deb568e41
|
Get open search policies
|
2025-03-15 22:47:43 +07:00 |
|
|
edops973
|
5e0eb15f7d
|
Add resource-trusts KMS unit test
|
2025-03-07 18:18:05 +07:00 |
|
|
edops973
|
ec497faba4
|
Support kms service for command resource-trusts
|
2025-03-07 15:25:53 +07:00 |
|
|
Seth Art
|
0184e1520d
|
Fix for IMDS not working due to breaking change in aws-sdk-go-v2.
|
2024-08-06 23:45:04 -04:00 |
|
|
sethsec-bf
|
57194ef3e0
|
bump to version 1.14.0, merged gcp and aws ds functionality
|
2024-04-16 10:32:19 -04:00 |
|
|
sethsec-bf
|
67af1bd7fb
|
update gcp package with vuln
|
2024-04-16 10:23:06 -04:00 |
|
|
sethsec-bf
|
6e52e5ee7b
|
merge gcp stuff from main into this branch
|
2024-04-15 16:33:09 -04:00 |
|
|
David
|
23e8878e49
|
Merge branch 'main' into feature/gcp-v1
|
2024-04-12 01:04:49 +00:00 |
|
|
Bastien Faure
|
de492fa6e9
|
Add Directory Service support for AWS
|
2024-04-02 11:49:45 -07:00 |
|
|
David
|
2f99a7642f
|
working gcp functionality
|
2024-03-13 14:19:47 +00:00 |
|
|
enzowritescode
|
a40f0aa179
|
More cleanup
|
2024-02-28 15:05:38 -07:00 |
|
|
sethsec-bf
|
36c9a5b795
|
Merged changes from neptune PR into this branch
|
2024-02-28 09:34:41 -05:00 |
|
|
sethsec-bf
|
e4f3421ea1
|
Added functionailty to hightlight admins in caper command
|
2024-02-02 13:23:49 -05:00 |
|
|
enzowritescode
|
29514a96b5
|
Merge in latest and fix merge conflicts
|
2024-01-25 19:33:19 -07:00 |
|
|
enzowritescode
|
a38451c1cd
|
Typo fixes, reduced copy pasta, Neptune support
|
2024-01-20 19:35:13 -07:00 |
|
|
sethsec-bf
|
ef25d8b04d
|
Merged origin/seth-dev into graph
|
2024-01-03 09:10:16 -05:00 |
|
|
sethsec-bf
|
97e2fef388
|
Add data from fwd:cloudsec's known_aws_accounts repo into role-trust module
|
2024-01-02 21:22:27 -05:00 |
|
|
sethsec-bf
|
5c4d0fda89
|
go get -u and fixes
|
2023-12-26 10:54:39 -05:00 |
|
|
sethsec-bf
|
66ffc57438
|
go mod tidy
|
2023-12-19 16:15:13 -05:00 |
|
|
sethsec-bf
|
5c40ef45df
|
initial ideas for graph command
|
2023-11-09 08:23:37 -05:00 |
|
|
sethsec-bf
|
06344b9421
|
added secrets manager to resourcetrusts and cloud9 to inventory
|
2023-11-01 08:53:22 -04:00 |
|
|
sethsec-bf
|
b43d6ad074
|
go get -u and fixes
|
2023-10-25 08:19:44 -04:00 |
|
|
sethsec-bf
|
818c3a88f4
|
fixed cache load issue, updated aws instances command to use cached data
|
2023-09-22 15:16:38 -04:00 |
|
|
sethsec-bf
|
d94fafe2b4
|
go get -u
|
2023-07-18 15:46:43 -04:00 |
|
|
sethsec-bf
|
00ed8a7336
|
Added many new resources to inventory. Made inventory rows dynamic. Only non-empty rows will print
|
2023-07-18 15:12:25 -04:00 |
|
|
sethsec-bf
|
2b294e5845
|
updated wrapping for files written to disk, updated go modules
|
2023-06-08 21:33:20 -04:00 |
|
|
sethsec-bf
|
b29e4ea6b3
|
changed output directory, added beginning phases of cached support - both within one single run, but also loading cached data from previous runs, added codebuild command, added orgs command, added databases command, switched everything to use carlos's output2 functions, changed the output flag from type (csv,table) to be like kubectl with wide/narrow
|
2023-05-30 10:55:39 -04:00 |
|
|
sethsec-bf
|
0276ce25a4
|
initial draft of the orgs command
|
2023-03-30 07:35:48 -04:00 |
|
|
sethsec-bf
|
f2f93779ca
|
updated inventory to include codebuild and started to break it out a bit into api call functions
|
2023-03-08 09:19:19 -05:00 |
|
|
dependabot[bot]
|
bb1313c5c8
|
Bump golang.org/x/net from 0.2.0 to 0.7.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.2.0 to 0.7.0.
- [Release notes](https://github.com/golang/net/releases)
- [Commits](https://github.com/golang/net/compare/v0.2.0...v0.7.0)
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected]>
|
2023-02-28 17:03:36 +00:00 |
|
|
carlosvendramini
|
a8b73ef60d
|
Merge remote-tracking branch 'origin/seth-dev' into carlos-dev
|
2023-02-21 06:43:29 -05:00 |
|
|
sethsec-bf
|
3238ac866a
|
switch awsservicemap behavior to pull latest servicemap from aws
|
2023-02-20 23:06:37 -05:00 |
|
|
carlosvendramini
|
99b798b556
|
finished the az inventory module PoC code
|
2023-02-09 10:03:14 -05:00 |
|
|
carlosvendramini-bf
|
4081025480
|
wrote a prototype for az public blobs enumeration
|
2023-02-01 15:51:06 -05:00 |
|
|
sethsec-bf
|
1ffd763a85
|
updated network-ports sections of cli/aws to incorporate new structure
|
2023-01-22 22:47:22 -05:00 |
|
|
Wyatt Dahlenburg
|
6e9aa37d4a
|
Refactor + Merge of Lightsail, ELBv2, ECS, ElastiCache, & EFS detections
|
2023-01-04 20:28:59 -07:00 |
|
|
sethsec-bf
|
e56634d7d5
|
updated awsservicemap mod to v1.0.0
|
2022-12-13 09:25:12 -05:00 |
|
|
sethsec-bf
|
8dc330494b
|
refactored eks command a bit to seperate functions
|
2022-12-12 14:23:28 -05:00 |
|
|
sethsec-bf
|
d455f4cde4
|
fixed bug where the multi profile cli options were not using the new enabledregions check.
|
2022-12-09 21:28:31 -05:00 |
|
|
sethsec-bf
|
43acb6884d
|
Updated to use v0.0.5 of awsservicemap, fixed bug in ecs-tasks when called from all-checks
|
2022-12-08 21:40:18 -05:00 |
|
|
sethsec-bf
|
3c4612b36e
|
Added enabled region check. Added awsservicemap package functionality
|
2022-12-01 21:53:18 -05:00 |
|