Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

v1.14.0, cape #84

Merged
merged 36 commits into from
Apr 16, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
36 commits
Select commit Hold shift + click to select a range
5c40ef4
initial ideas for graph command
sethsec-bf Nov 9, 2023
4edbd33
neo4j cross-account stuff kind of working, pmapper stuff not working
sethsec-bf Dec 6, 2023
c4a276e
graph/neo4j functionali working - detecting cross account attack paths
sethsec-bf Dec 11, 2023
66ffc57
go mod tidy
sethsec-bf Dec 19, 2023
1e2eaf5
merged from main
sethsec-bf Dec 20, 2023
ef25d8b
Merged origin/seth-dev into graph
sethsec-bf Jan 3, 2024
f5437b7
Started to add knownvendoraccounts info
sethsec-bf Jan 17, 2024
4cf58a3
Created loot file for pmapper
sethsec-bf Jan 18, 2024
009321e
Updated pmapper output files
sethsec-bf Jan 22, 2024
ac1125d
added users model
sethsec-bf Jan 22, 2024
4d3c6a4
Merge remote-tracking branch 'origin/seth-dev' into graph
sethsec-bf Jan 23, 2024
aeccb6d
Have global data in dom's graph format now. just need to write the ta…
sethsec-bf Jan 25, 2024
a13527a
Added MakeVertices method for type Role
sethsec-bf Jan 25, 2024
e61a401
Kept first draft as the graph command. Moved second take to the caper…
sethsec-bf Jan 31, 2024
e4f3421
Added functionailty to hightlight admins in caper command
sethsec-bf Feb 2, 2024
24b7076
saving place in caper command
sethsec-bf Feb 8, 2024
e4e5480
revert test
sethsec-bf Feb 8, 2024
42b0f3a
Merge branch 'main' of github.com:BishopFox/cloudfox into graph
sethsec-bf Feb 8, 2024
dd6dd29
playing around with saving graph state between runs
sethsec-bf Feb 13, 2024
36c9a5b
Merged changes from neptune PR into this branch
sethsec-bf Feb 28, 2024
05fd899
Fixed bug in federeated role trust poclies where multiple subjects ar…
sethsec-bf Mar 7, 2024
3ff704e
merged from main
sethsec-bf Mar 21, 2024
8fac75e
merged from main
sethsec-bf Mar 21, 2024
4ef87d8
updated caper to use new version of parseFederatedRoleTrusts from the…
sethsec-bf Mar 22, 2024
fca22ce
renamed to cape, added hop count logic, pulled privesc function out s…
sethsec-bf Mar 28, 2024
590a94b
changed println to printf
sethsec-bf Mar 28, 2024
3a45583
Got cape working without any aws calls, cleaned up logging messages
sethsec-bf Apr 5, 2024
356d57b
Added pmapper basepath to all relevent commands. Improved logging for…
sethsec-bf Apr 10, 2024
82635fd
made aws sso like eks, where edges are not created if it's if the pro…
sethsec-bf Apr 16, 2024
57194ef
bump to version 1.14.0, merged gcp and aws ds functionality
sethsec-bf Apr 16, 2024
77cd08b
updated gcp verbosity, updated cape command usage, switched version t…
sethsec-bf Apr 16, 2024
abcc930
added afero fs back to output2 (needed to pass brew tests)
sethsec-bf Apr 16, 2024
c3be95b
cleaned up enhanced pmapper loot file
sethsec-bf Apr 16, 2024
22417f1
spelling
sethsec-bf Apr 16, 2024
c0e4301
Add GCP to readme, fix typo
sethsec-bf Apr 16, 2024
a8d2bfb
Removed graph command from cobra for now
sethsec-bf Apr 16, 2024
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 5 additions & 1 deletion .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -71,4 +71,8 @@ cloudfox
*.json
*.csv
*.log
dist/
dist/

# graphvis files
*.gv
*.svg
18 changes: 17 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,7 @@ For the full documentation please refer to our [wiki](https://github.com/BishopF
| - | - |
| AWS | 34 |
| Azure | 4 |
| GCP | Support Planned |
| GCP | 8 |
| Kubernetes | Support Planned |


Expand Down Expand Up @@ -111,6 +111,7 @@ Additional policy notes (as of 09/2022):
| AWS | [access-keys](https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#access-keys) | Lists active access keys for all users. Useful for cross referencing a key you found with which in-scope account it belongs to. |
| AWS | [api-gw](https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#api-gw) | Lists API gateway endpoints and gives you custom curl commands including API tokens if they are stored in metadata. |
| AWS | [buckets](https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#filesystems) | Lists the buckets in the account and gives you handy commands for inspecting them further. |
| AWS | [cape](https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#cape) | Enumerates cross-account privilege escalation paths. Requires `pmapper` to be run first |
| AWS | [cloudformation](https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#cloudformation) | Lists the cloudformation stacks in the account. Generates loot file with stack details, stack parameters, and stack output - look for secrets. |
| AWS | [codebuild](https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#codebuild) | Enumerate CodeBuild projects |
| AWS | [databases](https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#databases) | Enumerate RDS databases. Get a loot file with connection strings. |
Expand Down Expand Up @@ -152,6 +153,21 @@ Additional policy notes (as of 09/2022):
| Azure | [storage](https://github.com/BishopFox/cloudfox/wiki/Azure-Commands#storage) | The storage command is still under development. Currently it only displays limited data about the storage accounts |
| Azure | [vms](https://github.com/BishopFox/cloudfox/wiki/Azure-Commands#vms) | Enumerates useful information for Compute instances in all available resource groups and subscriptions |


# GCP Commands
| Provider | Command Name | Description
| - | - | - |
| GCP | [whoami](https://github.com/BishopFox/cloudfox/wiki/GCP-Commands#whoami) | Display the email address of the GCP authenticated user |
| GCP | [all-checks](https://github.com/BishopFox/cloudfox/wiki/GCP-Commands#all-checks) | Runs all available GCP commands |
| GCP | [artifact-registry](https://github.com/BishopFox/cloudfox/wiki/GCP-Commands#artifact-registry) | Display GCP artifact registry information |
| GCP | [bigquery](https://github.com/BishopFox/cloudfox/wiki/GCP-Commands#bigquery) | Display Bigquery datasets and tables information |
| GCP | [buckets](https://github.com/BishopFox/cloudfox/wiki/GCP-Commands#buckets) | Display GCP buckets information |
| GCP | [iam](https://github.com/BishopFox/cloudfox/wiki/GCP-Commands#iam) | Display GCP IAM information |
| GCP | [instances](https://github.com/BishopFox/cloudfox/wiki/GCP-Commands#instances) | Display GCP Compute Engine instances information |
| GCP | [secrets](https://github.com/BishopFox/cloudfox/wiki/GCP-Commands#secrets) | Display GCP secrets information |



# Authors
* [Carlos Vendramini](https://github.com/carlosvendramini-bf)
* [Seth Art (@sethsec](https://twitter.com/sethsec))
Expand Down
Loading