Pacu Versions Save

What's Changed

• Feature/update cognito attack by @EduardSchwarzkopf in https://github.com/RhinoSecurityLabs/pacu/pull/406

New Contributors

• @EduardSchwarzkopf made their first contribution in https://github.com/RhinoSecurityLabs/pacu/pull/406

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.5.2...v1.5.3

What's Changed

• Added ed25519 private key pattern on regexs.json for secret finder functionality by @za in https://github.com/RhinoSecurityLabs/pacu/pull/397
• Update regexs in secret finder and create tests for secretfinder by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/399
• fix typo closes #398 by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/402
• Add region error handling to cloudformation download data module by @jdearmas in https://github.com/RhinoSecurityLabs/pacu/pull/409
• eks__enum fix by @davidkutz-marks in https://github.com/RhinoSecurityLabs/pacu/pull/411

New Contributors

• @za made their first contribution in https://github.com/RhinoSecurityLabs/pacu/pull/397
• @jdearmas made their first contribution in https://github.com/RhinoSecurityLabs/pacu/pull/409

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.5.1...v1.5.2

What's Changed

• Fix #392 by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/393
• Enhancement module/add akid decoder and module by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/391
• Improve credential handling by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/394

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.5.0...v1.5.1

What's Changed

• Clean up README by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/382
• fix #329 key error issue with iam__privesc_scan by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/386
• Fix #359 #215 update region updating/handeling and remove region filters by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/379
• Remove old install method by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/383
• Enhancement/remove version check add get version by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/381
• Make pacu version expand in workflow for docker version by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/387
• Fix #388 by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/389
• Fix #309 and update some functionality by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/390

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.4.2...v1.5.0

What's Changed

• Add ebs__enum_snapshots_unauth Module for Unauthenticated EBS Snapshot Reconnaissance by @Y4nush in https://github.com/RhinoSecurityLabs/pacu/pull/370

New Contributors

• @Y4nush made their first contribution in https://github.com/RhinoSecurityLabs/pacu/pull/370

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.4.1...v1.4.2

What's Changed

• Minor fix to identity pools by @davidkutz-marks in https://github.com/RhinoSecurityLabs/pacu/pull/374

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.4.0...v1.4.1

What's Changed

• Cognito Modules by @davidkutz-marks in https://github.com/RhinoSecurityLabs/pacu/pull/371

New Contributors

• @davidkutz-marks made their first contribution in https://github.com/RhinoSecurityLabs/pacu/pull/371

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.3.1...v1.4.0

What's Changed

• add jq command to parse collected data by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/358
• Expand route53__enum enumeration by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/361

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.3.0...v1.3.1

Modules A new LATERAL_MOVE module added: organizations__assume_role https://github.com/RhinoSecurityLabs/pacu/wiki/Module-Details#organizations__assume_role. Thanks @WebbinRoot !

Additions Added a new CLI option to import keys from a specified profile during a CLI run https://github.com/RhinoSecurityLabs/pacu/pull/357

Also bug fixes.

What's Changed

• fix #351 by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/352
• AWS Organizations - organizations__assume_role module by @WebbinRoot in https://github.com/RhinoSecurityLabs/pacu/pull/353
• Fix no loop break when enter for key alias by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/354
• Change session_token to be none when keys are set without one fixes #355 by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/356
• Enhancement/add cli option to import keys --import-keys by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/357

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.2.1...v1.3.0

Modules:

• Adds iam__enum_action_query module. This allows enumerated permissions to be queried by actions.

Enhancements:

• Adds privesc method information output and method list feature to the iam__privesc_scan module.

What's Changed

• Add privesc method info feature by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/347
• Module/iam enum_action_query by @DaveYesland in https://github.com/RhinoSecurityLabs/pacu/pull/348

Full Changelog: https://github.com/RhinoSecurityLabs/pacu/compare/v1.2.0...v1.2.1