enzowritescode
29514a96b5
Merge in latest and fix merge conflicts
2024-01-25 19:33:19 -07:00
sethsec-bf
1d1d198a01
More fixes from #72 . Took the suggestion from @johnkeates and fixed the prepopulated nmap commands to NOT include a profile for the cases where the user did not specify a profile for cloudfox
2024-01-25 20:23:03 -05:00
sethsec-bf
e08967bb31
This potential fix for #72 makes a lot more sense. Rather than overrwite the profile attribute of the struct, i have an AWSProfileProvided and a AWSProfileFake so that I can just pass the orig to other modules (since each module cleans it up itself).
2024-01-25 15:47:38 -05:00
sethsec-bf
89789a05c1
updated pmapper command info
2024-01-22 21:16:25 -05:00
sethsec-bf
5827abb2a2
Hopefully this is a fix for #72
2024-01-22 20:47:11 -05:00
enzowritescode
a38451c1cd
Typo fixes, reduced copy pasta, Neptune support
2024-01-20 19:35:13 -07:00
sethsec-bf
f13df0708c
Added mocks for apigw and apigwv2, and a test for the new api-gw command
2023-12-27 14:53:38 -05:00
sethsec-bf
cba252d151
Normalize/clean up console messages. Also re-order the way the messages print in multi-profile mode
2023-12-26 12:02:26 -05:00
sethsec-bf
2b19d0ac62
For 1.13, switching default AWS verbosity to 2 (with the exception of all-checks which will be hardocded to a versbosity of 1)
2023-12-26 10:20:04 -05:00
sethsec-bf
6e146a567a
add mfatoken param from recent update to api-gw code
2023-12-26 09:40:25 -05:00
sethsec-bf
ae7ed9e19a
Merge branch 'main' of github.com:BishopFox/cloudfox into seth-dev
2023-12-24 10:16:36 -05:00
Seth Art
26cb99778c
Merge pull request #64 from wdahlenburg/api-gw
...
API Gateway Module
2023-12-24 10:13:43 -05:00
sethsec-bf
82738dbf63
Fixed a bug where when pmapper data was missing iam simulator was not getting IAM roles properly. Also got workloads command working
2023-12-22 10:09:37 -05:00
sethsec-bf
96ab676f49
Feature: First draft of new workloads command - summarizes all workloads
2023-12-21 21:25:05 -05:00
sethsec-bf
b1c248bbe6
Used SDK, added more counters
...
Moved all api calls to the sdk package.
Added counter to getEndpointsPerAPIGatewayv2 and
getEndpointsPerAPIGateway because in regions with lots of apigateways
this took a long time and it just hung on 66/68 tasks and i worried. The
additional counters will help give visabilty that things are still
moving along.
Added an additional alias api-gws
2023-12-21 10:18:00 -05:00
sethsec-bf
a9a0c7ae30
more updates for #65 . Added a cli flag --mfa-token so you can pass the token at the cloudfox command line. Ended up reworking AWSConfigFileLoader to use a map to store fetched configs which should have other performance improvemnts
2023-12-13 09:50:30 -05:00
Wyatt Dahlenburg
5eff1c71ac
Merging with main + minor updates
2023-11-16 15:05:54 -07:00
sethsec-bf
06344b9421
added secrets manager to resourcetrusts and cloud9 to inventory
2023-11-01 08:53:22 -04:00
sethsec-bf
909590860d
added user controled columns to cloudformation, and access keys
2023-10-23 16:28:22 -04:00
sethsec-bf
4ee0da839d
added user controled columns to buckets, role-trusts, permissions
2023-10-23 16:00:48 -04:00
sethsec-bf
dad2277942
moved policy analysis behind a feature flag in the buckets command
2023-10-19 10:04:53 -04:00
Christian Clauss
f78f1490d2
Fix typos discovered by codespell
2023-09-07 15:17:08 +02:00
Wyatt Dahlenburg
17011f345c
Additional enumeration on API gateways compared to the endpoints module
2023-08-14 21:33:27 -06:00
sethsec-bf
aa42c8b808
renamed azure instances -> vms, got userdata loot working on azure vms command
2023-08-14 13:43:13 -04:00
sethsec-bf
01d320d64d
inventory now supports tenant mode, both merged and split. fixed all tests
2023-08-10 14:54:25 -04:00
sethsec-bf
102b91e2c7
Got rbac working with the new directory stucture and accepting common names for tentant and subscirption as input params
2023-08-08 13:02:49 -04:00
sethsec-bf
3a19fdb2fe
reworking the tenant/subscription file structure
2023-07-24 09:50:59 -04:00
sethsec-bf
00ed8a7336
Added many new resources to inventory. Made inventory rows dynamic. Only non-empty rows will print
2023-07-18 15:12:25 -04:00
sethsec-bf
60daff386c
updated inventory to include more redshift, route53, updated route53 to use new cached functions and to include CNAME records in loot
2023-07-12 16:19:53 -04:00
sethsec-bf
e88cb77394
updated inventory to include more ec2, ecs, and ecr resources
2023-07-11 09:29:03 -04:00
sethsec-bf
06a7e7ec28
Updated sdk package to do the gob initializations in self contained init functions
2023-07-06 14:35:57 -04:00
sethsec-bf
471da59da2
Updated ecs-tasks and eni to use cached functions
2023-07-06 11:29:21 -04:00
sethsec-bf
dc0396ff33
updated logging path to have profile come before account-id to make it easier to find the right data
2023-06-28 11:37:45 -04:00
sethsec-bf
2c5fec49c3
loading cache from files by default was a bad idea. changed default to not load cache from disk, and if the -c flag is used, then cache is loaded from disk
2023-06-14 12:46:04 -04:00
sethsec-bf
9581425231
updates to resource-trust command
2023-06-08 16:19:57 -04:00
sethsec-bf
ce6c3f76fa
migrated ecr and a few other functions in the endpoints and env-vars commands to use the cached functions
2023-06-03 12:41:10 -04:00
sethsec-bf
497c7940d2
migrated ecr to cached functions
2023-05-31 12:56:31 -04:00
sethsec-bf
b29e4ea6b3
changed output directory, added beginning phases of cached support - both within one single run, but also loading cached data from previous runs, added codebuild command, added orgs command, added databases command, switched everything to use carlos's output2 functions, changed the output flag from type (csv,table) to be like kubectl with wide/narrow
2023-05-30 10:55:39 -04:00
sethsec-bf
2756cd0f45
changed default output dir to ~/.cloudfox/cloudfox-output
2023-05-23 15:32:43 -04:00
sethsec-bf
8722782eae
merged from main
2023-04-04 21:26:37 -04:00
sethsec-bf
5f7596b497
more draft work on the orgs command
2023-04-04 16:11:08 -04:00
sethsec-bf
0276ce25a4
initial draft of the orgs command
2023-03-30 07:35:48 -04:00
sethsec-bf
7490d1aaa1
fixed bug that wrote buckets, sns, sqs files in the wrong place when using environment variables
2023-03-28 15:18:01 -04:00
sethsec-bf
365286665c
moved sns/sqs to another section in all-checks
2023-03-27 13:44:15 -04:00
motikan2010
51f0b65087
bugfix 'SQS' and 'SNS' are inspected when 'all-checks' is executed.
2023-03-26 21:32:24 +09:00
sethsec-bf
56247f40d4
first draft of resource-trusts command
2023-03-18 07:52:27 -04:00
Seth Art
dc7c8c6f68
Merge branch 'main' into carlos-dev
2023-03-13 16:43:46 -04:00
carlosvendramini
77c7edfc82
fixed an error handling bug on the az storage and whoami commands
2023-03-08 11:17:13 -05:00
sethsec-bf
f2f93779ca
updated inventory to include codebuild and started to break it out a bit into api call functions
2023-03-08 09:19:19 -05:00
carlosvendramini-bf
d02b5e8f0e
Merge pull request #31 from BishopFox/carlos-dev
...
Carlos dev
2023-02-28 11:49:47 -05:00
enzowritescode