pacu

This release requires a newly initialized DB for previous versions: rm ~/.local/share/pacu/sqlite.db

What's Changed

• Fix an error in ebs__download_snapshots by @TeneBrae93 in https://github.com/RhinoSecurityLabs/pacu/pull/418
• Validate target-instances for systemsmanager__rce_ec2 by @h00die in https://github.com/RhinoSecurityLabs/pacu/pull/419
• Add error handling to get_policy in systemsmanager__rce_ec2 by @h00die in https://github.com/RhinoSecurityLabs/pacu/pull/420
• Fix aws-cli install in Dockerfile, breaking workflows by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/430
• Fix spelling of public by @h00die in https://github.com/RhinoSecurityLabs/pacu/pull/425
• Fix spelling of later by @h00die in https://github.com/RhinoSecurityLabs/pacu/pull/428
• fix iam__decode_accesskey_id category by @h00die in https://github.com/RhinoSecurityLabs/pacu/pull/429
• change enum__secrets to secrets__enum by @h00die in https://github.com/RhinoSecurityLabs/pacu/pull/427
• Fix module list generation for autocomplete by @h00die in https://github.com/RhinoSecurityLabs/pacu/pull/424
• New Feature: Quiet Flag by @h00die in https://github.com/RhinoSecurityLabs/pacu/pull/426
• Enhance iam__enum_permissions w/ unconfirmed and counts by @h00die in https://github.com/RhinoSecurityLabs/pacu/pull/421
• New Module: SNS topic subscription via email & SNS enum by @h00die in https://github.com/RhinoSecurityLabs/pacu/pull/422
• New module: mq__enum by @6a6f656c in https://github.com/RhinoSecurityLabs/pacu/pull/431
• Add options to privesc module and Fix #415 by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/432
• Issue 412 username overwrite by @EduardSchwarzkopf in https://github.com/RhinoSecurityLabs/pacu/pull/413

New Contributors

• @TeneBrae93 made their first contribution in https://github.com/RhinoSecurityLabs/pacu/pull/418
• @h00die made their first contribution in https://github.com/RhinoSecurityLabs/pacu/pull/419
• @6a6f656c made their first contribution in https://github.com/RhinoSecurityLabs/pacu/pull/431

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.5.3...v1.6.0

What's Changed

• Feature/update cognito attack by @EduardSchwarzkopf in https://github.com/RhinoSecurityLabs/pacu/pull/406

New Contributors

• @EduardSchwarzkopf made their first contribution in https://github.com/RhinoSecurityLabs/pacu/pull/406

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.5.2...v1.5.3

What's Changed

• Added ed25519 private key pattern on regexs.json for secret finder functionality by @za in https://github.com/RhinoSecurityLabs/pacu/pull/397
• Update regexs in secret finder and create tests for secretfinder by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/399
• fix typo closes #398 by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/402
• Add region error handling to cloudformation download data module by @jdearmas in https://github.com/RhinoSecurityLabs/pacu/pull/409
• eks__enum fix by @davidkutz-marks in https://github.com/RhinoSecurityLabs/pacu/pull/411

New Contributors

• @za made their first contribution in https://github.com/RhinoSecurityLabs/pacu/pull/397
• @jdearmas made their first contribution in https://github.com/RhinoSecurityLabs/pacu/pull/409

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.5.1...v1.5.2

What's Changed

• Fix #392 by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/393
• Enhancement module/add akid decoder and module by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/391
• Improve credential handling by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/394

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.5.0...v1.5.1

What's Changed

• Clean up README by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/382
• fix #329 key error issue with iam__privesc_scan by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/386
• Fix #359 #215 update region updating/handeling and remove region filters by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/379
• Remove old install method by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/383
• Enhancement/remove version check add get version by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/381
• Make pacu version expand in workflow for docker version by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/387
• Fix #388 by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/389
• Fix #309 and update some functionality by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/390

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.4.2...v1.5.0

What's Changed

• Add ebs__enum_snapshots_unauth Module for Unauthenticated EBS Snapshot Reconnaissance by @Y4nush in https://github.com/RhinoSecurityLabs/pacu/pull/370

New Contributors

• @Y4nush made their first contribution in https://github.com/RhinoSecurityLabs/pacu/pull/370

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.4.1...v1.4.2

What's Changed

• Minor fix to identity pools by @davidkutz-marks in https://github.com/RhinoSecurityLabs/pacu/pull/374

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.4.0...v1.4.1

What's Changed

• Cognito Modules by @davidkutz-marks in https://github.com/RhinoSecurityLabs/pacu/pull/371

New Contributors

• @davidkutz-marks made their first contribution in https://github.com/RhinoSecurityLabs/pacu/pull/371

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.3.1...v1.4.0

What's Changed

• add jq command to parse collected data by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/358
• Expand route53__enum enumeration by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/361

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.3.0...v1.3.1

Modules
A new LATERAL_MOVE module added: organizations__assume_role https://github.com/RhinoSecurityLabs/pacu/wiki/Module-Details#organizations__assume_role. Thanks @WebbinRoot !

Additions
Added a new CLI option to import keys from a specified profile during a CLI run https://github.com/RhinoSecurityLabs/pacu/pull/357

Also bug fixes.

What's Changed

• fix #351 by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/352
• AWS Organizations - organizations__assume_role module by @WebbinRoot in https://github.com/RhinoSecurityLabs/pacu/pull/353
• Fix no loop break when enter for key alias by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/354
• Change session_token to be none when keys are set without one fixes #355 by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/356
• Enhancement/add cli option to import keys --import-keys by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/357

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.2.1...v1.3.0

Modules:

• Adds iam__enum_action_query module. This allows enumerated permissions to be queried by actions.

Enhancements:

• Adds privesc method information output and method list feature to the iam__privesc_scan module.

What's Changed

• Add privesc method info feature by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/347
• Module/iam enum_action_query by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/348

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.2.0...v1.2.1

Changes:

• Refactors iam__enum_permissions and iam__privesc_scan to use Policy Universe (https://github.com/Netflix-Skunkworks/policyuniverse)
• Bump the minimum Python version to 3.7

This should make policy parsing more accurate and allow the use of policy universe in other modules.

What's Changed

• Enhancement/use policy universe for iam enum by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/344

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.1.6...v1.2.0

Bug fixes:
#275
#297
#340
#342

What's Changed

• fixes #275 by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/338
• fix #297 by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/339
• fixes #340 by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/341
• fixes #342 by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/343

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.1.5...v1.1.6

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.1.4...v1.1.5

Fix remote last update check.

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.0.2...v1.0.3