Commit Graph

Select branches

Hide Pull Requests

add-386-binary-to-release

aws-databases-rds-fix

bastien_directoryservice_aws

codeowners

feature/aws-neptune

feature/gcp-v1

fix/github-actions-node24

fix/go-stdlib-vulnerabilities

fix/network-ports-map-race

fix/pmapper-basepath-all-checks

gcp-dev

general-improvements_azure-commands

graph

imds-fix

jb/azure-dev

jb/gcp-dev

jb/k8s-dev

main

seth-dev

sethsec-bf-patch-1

version-bump-2.0.2

#100

#101

#102

#104

#106

#107

#109

#110

#111

#112

#113

#114

#115

#116

#117

#118

#119

#120

#121

#122

#123

#124

#125

#126

#127

#128

#130

#133

#133/merge

#134

#135

#135/merge

#136

#138

#14

#15

#16

#18

#19

#20

#21

#23

#25

#26

#29

#30

#31

#32

#33

#35

#39

#4

#40

#41

#43

#44

#45

#46

#48

#49

#5

#50

#51

#52

#55

#56

#59

#6

#60

#61

#64

#66

#67

#68

#69

#7

#71

#73

#74

#75

#78

#79

#8

#80

#81

#82

#83

#84

#87

#89

#90

#93

#96

#97

#99

v1.10.0

v1.10.1

v1.10.2

v1.10.3

v1.11.0

v1.11.1

v1.11.2

v1.11.3

v1.12.0

v1.12.1

v1.12.2

v1.12.3

v1.13.0

v1.13.1

v1.13.2

v1.13.3

v1.13.4

v1.14.0

v1.14.1

v1.14.2

v1.15.0

v1.17.0

v1.6.0

v1.7.0

v1.7.1

v1.7.2

v1.8.0

v1.8.1

v1.9.0

v1.9.1

v2.0.0

v2.0.0a

v2.0.1

v2.0.2

v2.0.3

v2.0.4

v2.0.5

Mono Color

• f65be085cd Merge pull request #138 from BishopFox/azure_improvements main jbarciabf 2026-11-02 08:22:04 -05:00
• 16320591ea Migrated parts of whoami into tokencache, stuffed existing whoami with entra ID discovery Bastien Faure 2026-10-30 21:28:15 -04:00
• 5267f430b0 fix Bastien Faure 2026-10-30 20:39:48 -04:00
• 4a63b18fd3 Updated automation in azure, use shared logger Bastien Faure 2026-10-30 20:35:07 -04:00
• 0642b82438 Updated functions, use new logger Bastien Faure 2026-10-30 20:34:38 -04:00
• e688d79ed2 Migrated azure commands to shared logger Bastien Faure 2026-10-30 17:37:16 -04:00
• 2f0cfd7b1f Added Azure automation command Bastien Faure 2026-10-29 23:55:08 -04:00
• e3a1803cce Added Azure Func module Bastien Faure 2026-10-29 23:54:16 -04:00
• 6257da9391 Added ACR module for Azure Bastien Faure 2026-10-29 23:51:47 -04:00
• d44899f213 Merge pull request #134 from sethsec/fix-region-slowness Bastien Faure 2026-08-20 14:39:52 -04:00
• 29ab782b31 Fix region slowness and hangs with opt-in/unreachable regions Seth Art 2026-06-17 14:29:10 -04:00
• ba4ff4701a Merge pull request #130 from BishopFox/fix/network-ports-map-race v2.0.5 jbarciabf 2026-05-26 10:45:11 -04:00
• 81be56e006 Bump version to 2.0.5 fix/network-ports-map-race jbarciabf 2026-05-26 10:42:29 -04:00
• 494443d7ce Fix concurrent map access race in network-ports module (#129) jbarciabf 2026-05-26 10:36:17 -04:00
• 3d3cfc6c0c Update GitHub Actions to Node 24 compatible versions Joseph Barcia 2026-04-21 16:44:08 +00:00
• 0801228b72 minor fixes jb/gcp-dev jbarciabf 2026-05-19 11:08:57 -04:00
• 79989c659d fixes jb/k8s-dev jbarciabf 2026-05-19 11:08:45 -04:00
• 5444e472e4 fixes jb/azure-dev jbarciabf 2026-05-19 11:03:14 -04:00
• d161a10191 Update GitHub Actions to Node 24 compatible versions fix/github-actions-node24 Joseph Barcia 2026-04-21 16:44:08 +00:00
• 1b0925877d Merge pull request #127 from BishopFox/fix/pmapper-basepath-all-checks v2.0.4 jbarciabf 2026-04-21 09:06:40 -04:00
• 7727d1d08c Fix pmapper-data-basepath ignored in all-checks and race condition in instances module fix/pmapper-basepath-all-checks Joseph Barcia 2026-04-21 13:06:11 +00:00
• c7f81dc5cc Merge pull request #126 from mitre88/main jbarciabf 2026-04-21 09:02:34 -04:00
• 008fb84d23 Fix --pmapper-data-basepath ignored in all-checks for EC2 user data module Open Source Contributor 2026-04-20 20:38:56 -06:00
• 2e62d4d3cb Add ARM SDK retry tuning, rate limiting, and adaptive throttle handling jbarciabf 2026-04-20 16:55:40 -04:00
• 0bd2748b8b Merge main into jb/k8s-dev (resolve go.mod/go.sum conflicts) jbarciabf 2026-04-20 10:44:29 -04:00
• 5a5aa316fe Merge branch 'main' into jb/azure-dev jbarciabf 2026-04-20 10:31:55 -04:00
• b47d4b0b45 Merge branch 'main' into jb/gcp-dev jbarciabf 2026-04-20 10:31:41 -04:00
• 142757b5c2 Merge pull request #125 from BishopFox/fix/go-stdlib-vulnerabilities v2.0.3 jbarciabf 2026-04-13 09:06:34 -04:00
• 146034d619 Update AWS SDK to fix EventStream decoder panic (GHSA-xmrv-pmrh-hhx2) fix/go-stdlib-vulnerabilities Joseph Barcia 2026-04-13 12:59:37 +00:00
• 9e056b29d7 Update opentelemetry-go to v1.43.0 and go-jose to v4.1.4 Joseph Barcia 2026-04-13 12:55:22 +00:00
• 871491738b Upgrade Go to 1.25.9 and bump version to 2.0.3 Joseph Barcia 2026-04-12 18:16:58 +00:00
• 033c953d57 Merge pull request #124 from BishopFox/version-bump-2.0.2 v2.0.2 jbarciabf 2026-04-12 13:49:44 -04:00
• a7e45b9ae5 Bump version to 2.0.2 version-bump-2.0.2 Joseph Barcia 2026-04-12 17:47:40 +00:00
• ce513ba04d Merge pull request #123 from sethsec/fix/awsservicemap-v1.1.0-service-slugs jbarciabf 2026-04-12 13:46:14 -04:00
• 83f9af249d Update google.golang.org/grpc to v1.79.3 to fix GO-2026-4762 Joseph Barcia 2026-04-12 17:40:35 +00:00
• 11652a9a6e Fix service slug mismatches for awsservicemap v1.1.0 across all commands Seth Art 2026-04-11 11:37:03 -04:00
• 6ac7a0bf6b Fix secrets command skipping all regions due to stale service slug names Seth Art 2026-04-11 11:30:28 -04:00
• 5dbb1a9c32 CVE-2026-33186 fix jbarciabf 2026-03-24 11:29:57 -04:00
• d573ca6fb6 added OS Login Policy check at org level jbarciabf 2026-03-10 09:44:51 -04:00
• 5ea2f8618f merged upstream jbarciabf 2026-03-09 12:02:58 -04:00
• 79aa3f48ef Merge remote-tracking branch 'upstream/main' into jb/gcp-dev jbarciabf 2026-03-09 11:51:26 -04:00
• 766566e01d Merge remote-tracking branch 'upstream/main' into jb/azure-dev jbarciabf 2026-03-09 11:50:36 -04:00
• c6fcdba665 Merge pull request #122 from jbarciabf/fix/CVE-2026-24051 v2.0.1 jbarciabf 2026-03-09 10:10:46 -04:00
• adc9a27232 added role enumeration for resource level bindings jbarciabf 2026-03-06 11:24:02 -05:00
• 3d58404721 bug fix for when _withcond_<hash> role names when policy version 3 wasn't requested jbarciabf 2026-03-05 22:51:52 -05:00
• 4f2c2cb4c9 Bump go.opentelemetry.io/otel/sdk to v1.40.0 (CVE-2026-24051) jbarciabf 2026-03-05 08:17:36 -05:00
• 531a2ed572 added full wif path jbarciabf 2026-03-04 21:26:21 -05:00
• 5d5c021c20 fixed token and access key identity enumeration jbarciabf 2026-03-04 15:03:24 -05:00
• 182e26c7bc updated readme jbarciabf 2026-03-04 13:26:29 -05:00
• 1cf3d52855 improved queries jbarciabf 2026-03-04 12:26:27 -05:00
• dc040c3f94 added project bindings so user can run a single module when targeting a resource instead of multiple modules jbarciabf 2026-03-04 12:05:16 -05:00
• 9689de900b Merge remote-tracking branch 'upstream/main' into jb/k8s-dev jbarciabf 2026-03-04 10:00:26 -05:00
• 454ca1f81e Merge remote-tracking branch 'upstream/main' into jb/gcp-dev jbarciabf 2026-03-04 10:00:04 -05:00
• 68e09e9784 Merge remote-tracking branch 'upstream/main' into jb/azure-dev jbarciabf 2026-03-04 09:59:07 -05:00
• 521422f5d6 fixed 'admin' check for custom roles jbarciabf 2026-03-04 09:52:42 -05:00
• db8a6895c3 Merge pull request #118 from prdngr/fix-privesc-false-positive v2.0.0a v2.0.0 jbarciabf 2026-03-04 09:18:59 -05:00
• 45197cf89d added back known admin roles jbarciabf 2026-03-04 09:08:09 -05:00
• b8bb8473e2 fixed quota detection for impersonation jbarciabf 2026-03-04 08:55:18 -05:00
• 11763f04f6 Merge branch 'BishopFox:main' into fix-privesc-false-positive Dominik Prodinger 2026-03-04 10:39:12 +01:00
• 29c9a2e7a5 added key auth jbarciabf 2026-03-03 21:48:16 -05:00
• 462dba9c10 fixed output misses in serviceaccounts jbarciabf 2026-03-03 21:36:48 -05:00
• 2275e5872c fixed gap in resource bindings not populating jbarciabf 2026-03-03 21:12:58 -05:00
• 9d5c7b79f2 added --query to filter on keywords jbarciabf 2026-03-03 14:48:44 -05:00
• 5a04bef828 centralized session management and implemented service account impersonation (gcloud --impersonate-service-account) jbarciabf 2026-03-03 10:05:29 -05:00
• 3887531d12 added quota project detection and override and fixed silent "not found" errors jbarciabf 2026-03-02 13:43:35 -05:00
• 332a5df61c added @bishopfaure access-tokens logic and output jbarciabf 2026-03-02 10:46:54 -05:00
• 2c4a83017c added @bishopfaure access-tokens logic and output jbarciabf 2026-03-02 10:37:28 -05:00
• bde29aa2d6 added @bishopfaure access-tokens logic and output jbarciabf 2026-03-02 10:36:21 -05:00
• e74b6e0e00 Merge remote-tracking branch 'upstream/main' into jb/k8s-dev jbarciabf 2026-02-27 13:55:15 -05:00
• be4235c7e5 Merge remote-tracking branch 'upstream/main' into jb/azure-dev jbarciabf 2026-02-27 13:54:26 -05:00
• 0ba9e2d37f Merge pull request #121 from BishopFox/jb/gcp-dev Bastien Faure 2026-02-27 09:05:41 -05:00
• a3d1c09558 fixed codespell referer error jbarciabf 2026-02-26 16:32:53 -05:00
• c41b35480e misc jbarciabf 2026-02-26 15:28:35 -05:00
• a3b7ab4269 rename buckets -> storage jbarciabf 2026-02-26 15:01:18 -05:00
• 3551ed2f75 added limitation checks jbarciabf 2026-02-26 12:56:10 -05:00
• 60c6b8d61c added log-enum, bigquery-enum, bigtable-enum, spanner-enum to search for sensitive stored data jbarciabf 2026-02-26 12:55:50 -05:00
• 8db014b136 updated foxmapper mappings jbarciabf 2026-02-21 14:12:23 -05:00
• 72cd367086 fixed potential panics jbarciabf 2026-02-20 16:12:28 -05:00
• f2d4b7c535 updated readme jbarciabf 2026-02-20 13:06:07 -05:00
• 47d69d870f remove alias due to conflict jbarciabf 2026-02-20 12:59:43 -05:00
• c9d1c2de68 normalized loot files and added additional commands jbarciabf 2026-02-20 11:59:20 -05:00
• a8e802404f code cleanup jbarciabf 2026-02-20 08:31:44 -05:00
• d021ea54de cleanup output, better streaming and file splitting jbarciabf 2026-02-19 18:17:24 -05:00
• 7a18090609 removed attackpath and orgcache flags and enable by default jbarciabf 2026-02-16 15:17:04 -05:00
• cb8be678e7 removed attack paths to use foxmapper instead jbarciabf 2026-02-15 23:02:27 -05:00
• 4838700d81 fixed output for workloads jbarciabf 2026-02-14 21:57:02 -05:00
• 98f6eda041 removed truncation jbarciabf 2026-02-12 15:58:09 -05:00
• 780290089e fixed using cloud provider env & added cloudiam module jbarciabf 2026-02-12 15:49:04 -05:00
• 6f45cbe900 Fix false positive where GitHub Actions subject was not recognized Dominik Prodinger 2026-02-09 12:19:05 +01:00
• 8a248e3127 updated instances jbarciabf 2026-02-04 21:53:51 -05:00
• de141300e9 fixed enumerate regions where permissions were sometimes denied jbarciabf 2026-02-04 20:35:44 -05:00
• eb76d76dea physical cache instead of memory. 1st wave of cleanup jbarciabf 2026-02-04 14:15:16 -05:00
• 5925557f2c admission policy updates jbarciabf 2026-01-31 22:01:35 -05:00
• fb66034132 centralzed attack paths and cleaned up admission policies jbarciabf 2026-01-30 20:52:10 -05:00
• e45ea2a327 random output cleanup jbarciabf 2026-01-30 14:02:10 -05:00
• 72a551b38b centralized attackpath service and playbooks jbarciabf 2026-01-30 10:53:15 -05:00
• 59bac4ee36 fixed whoami output and added new attack paths jbarciabf 2026-01-30 09:22:38 -05:00
• 44bf8e8915 added attackpaths and loot jbarciabf 2026-01-29 16:16:17 -05:00
• a80b385e28 added get nodes/proxy to attack path service jbarciabf 2026-01-27 12:38:06 -05:00
• e57d8673e7 added more cacheing jbarciabf 2026-01-27 08:32:14 -05:00