189 Commits
Author SHA1 Message Date
sethsec-bf a8d2bfbfb3 Removed graph command from cobra for now 2024-04-16 14:18:47 -04:00
sethsec-bf 22417f174b spelling 2024-04-16 11:54:10 -04:00
sethsec-bf 77cd08b8d5 updated gcp verbosity, updated cape command usage, switched version tracking file from main.go to internal/utils.go 2024-04-16 11:24:18 -04:00
sethsec-bf 57194ef3e0 bump to version 1.14.0, merged gcp and aws ds functionality 2024-04-16 10:32:19 -04:00
sethsec-bf 82635fd44f made aws sso like eks, where edges are not created if it's if the provider is in the same account as the role that trusts it. the edges will still show up cross account though. 2024-04-16 10:28:15 -04:00
sethsec-bf 6e52e5ee7b merge gcp stuff from main into this branch 2024-04-15 16:33:09 -04:00
David 23e8878e49 Merge branch 'main' into feature/gcp-v1 2024-04-12 01:04:49 +00:00
sethsec-bf 356d57b2de Added pmapper basepath to all relevent commands. Improved logging for cape/cape-tui. Fixed codebuld cache bug. 2024-04-10 11:49:33 -04:00
sethsec-bf 3a45583015 Got cape working without any aws calls, cleaned up logging messages 2024-04-05 16:07:37 -04:00
Bastien Faure de492fa6e9 Add Directory Service support for AWS 2024-04-02 11:49:45 -07:00
David dee22b3ebc fix logging issue and improve whoami 2024-03-29 19:44:17 +00:00
sethsec-bf fca22ceb6b renamed to cape, added hop count logic, pulled privesc function out so i can add logic to handle cobra flags 2024-03-28 15:06:41 -04:00
sethsec-bf 4ef87d8b98 updated caper to use new version of parseFederatedRoleTrusts from the role-trusts command. Also changed the way vendors and federated identities are labled 2024-03-22 08:58:05 -04:00
David 334583d3a2 save work whomai account stub 2024-03-21 22:38:02 +00:00
sethsec-bf 8fac75ed11 merged from main 2024-03-21 09:58:35 -04:00
sethsec-bf 3ff704e98f merged from main 2024-03-21 09:56:18 -04:00
David 2f99a7642f working gcp functionality 2024-03-13 14:19:47 +00:00
sethsec-bf 05fd899219 Fixed bug in federeated role trust poclies where multiple subjects are trusted 2024-03-07 15:56:13 -05:00
enzowritescode a40f0aa179 More cleanup 2024-02-28 15:05:38 -07:00
sethsec-bf 36c9a5b795 Merged changes from neptune PR into this branch 2024-02-28 09:34:41 -05:00
sethsec-bf dd6dd291c5 playing around with saving graph state between runs 2024-02-13 16:20:37 -05:00
sethsec-bf 42b0f3a212 Merge branch 'main' of github.com:BishopFox/cloudfox into graph 2024-02-08 16:57:03 -05:00
sethsec-bf 24b7076bc3 saving place in caper command 2024-02-08 16:32:15 -05:00
sethsec-bf e4f3421ea1 Added functionailty to hightlight admins in caper command 2024-02-02 13:23:49 -05:00
sethsec-bf e61a401733 Kept first draft as the graph command. Moved second take to the caper command. 2024-01-31 16:47:29 -05:00
enzowritescode 29514a96b5 Merge in latest and fix merge conflicts 2024-01-25 19:33:19 -07:00
sethsec-bf 1d1d198a01 More fixes from #72. Took the suggestion from @johnkeates and fixed the prepopulated nmap commands to NOT include a profile for the cases where the user did not specify a profile for cloudfox 2024-01-25 20:23:03 -05:00
sethsec-bf a13527a7a9 Added MakeVertices method for type Role 2024-01-25 16:25:11 -05:00
sethsec-bf e08967bb31 This potential fix for #72 makes a lot more sense. Rather than overrwite the profile attribute of the struct, i have an AWSProfileProvided and a AWSProfileFake so that I can just pass the orig to other modules (since each module cleans it up itself). 2024-01-25 15:47:38 -05:00
sethsec-bf aeccb6db6d Have global data in dom's graph format now. just need to write the table creation code 2024-01-25 15:24:49 -05:00
sethsec-bf 4d3c6a4c67 Merge remote-tracking branch 'origin/seth-dev' into graph 2024-01-22 21:26:47 -05:00
sethsec-bf 89789a05c1 updated pmapper command info 2024-01-22 21:16:25 -05:00
sethsec-bf 5827abb2a2 Hopefully this is a fix for #72 2024-01-22 20:47:11 -05:00
sethsec-bf 009321e7cb Updated pmapper output files 2024-01-22 15:44:43 -05:00
enzowritescode a38451c1cd Typo fixes, reduced copy pasta, Neptune support 2024-01-20 19:35:13 -07:00
sethsec-bf ef25d8b04d Merged origin/seth-dev into graph 2024-01-03 09:10:16 -05:00
sethsec-bf f13df0708c Added mocks for apigw and apigwv2, and a test for the new api-gw command 2023-12-27 14:53:38 -05:00
sethsec-bf cba252d151 Normalize/clean up console messages. Also re-order the way the messages print in multi-profile mode 2023-12-26 12:02:26 -05:00
sethsec-bf 2b19d0ac62 For 1.13, switching default AWS verbosity to 2 (with the exception of all-checks which will be hardocded to a versbosity of 1) 2023-12-26 10:20:04 -05:00
sethsec-bf 6e146a567a add mfatoken param from recent update to api-gw code 2023-12-26 09:40:25 -05:00
sethsec-bf ae7ed9e19a Merge branch 'main' of github.com:BishopFox/cloudfox into seth-dev 2023-12-24 10:16:36 -05:00
Seth Art 26cb99778c Merge pull request #64 from wdahlenburg/api-gw
API Gateway Module
2023-12-24 10:13:43 -05:00
sethsec-bf 82738dbf63 Fixed a bug where when pmapper data was missing iam simulator was not getting IAM roles properly. Also got workloads command working 2023-12-22 10:09:37 -05:00
sethsec-bf 96ab676f49 Feature: First draft of new workloads command - summarizes all workloads 2023-12-21 21:25:05 -05:00
sethsec-bf b1c248bbe6 Used SDK, added more counters
Moved all api calls to the sdk package.
Added counter to getEndpointsPerAPIGatewayv2 and
getEndpointsPerAPIGateway because in regions with lots of apigateways
this took a long time and it just hung on 66/68 tasks and i worried. The
additional counters will help give visabilty that things are still
moving along.
Added an additional alias api-gws
2023-12-21 10:18:00 -05:00
sethsec-bf 1e2eaf5576 merged from main 2023-12-19 20:15:14 -05:00
sethsec-bf a9a0c7ae30 more updates for #65. Added a cli flag --mfa-token so you can pass the token at the cloudfox command line. Ended up reworking AWSConfigFileLoader to use a map to store fetched configs which should have other performance improvemnts 2023-12-13 09:50:30 -05:00
sethsec-bf c4a276e4be graph/neo4j functionali working - detecting cross account attack paths 2023-12-11 18:24:34 -05:00
sethsec-bf 4edbd3326c neo4j cross-account stuff kind of working, pmapper stuff not working 2023-12-06 15:52:49 -05:00
Wyatt Dahlenburg 5eff1c71ac Merging with main + minor updates 2023-11-16 15:05:54 -07:00