TerraformGoat Versions Save

TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.

0.0.7

1 year ago

What's Changed

fix tencent tf

Full Changelog: https://github.com/HXSecurity/TerraformGoat/compare/0.0.6...0.0.7

0.0.6

1 year ago

What's Changed

fix: fix tencent tf by @teamssix in https://github.com/HXSecurity/TerraformGoat/pull/102

Full Changelog: https://github.com/HXSecurity/TerraformGoat/compare/0.0.5...0.0.6

0.0.5

1 year ago

What's Changed

docs: update readme by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/77
refactor: optimized scenario directory structure by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/78
feat: add aws EBS volume encryption is disabled by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/79
feat: add aws vpc security group open all port by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/80
feat: add aws vpc security group open common ports by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/81
refactor: optimized scenario directory structure by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/82
feat: add aws snapshots of EBS volumes are unencrypted by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/83
feat: add aws EBS volumes are not used by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/84
feat: add tencent cloud cbs storage are not used by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/85
feat: add kubernets etcd unauth scenario by @leveryd in https://github.com/HuoCorp/TerraformGoat/pull/86
feat: add kubernetes etcd grpc-proxy unauth scenario by @leveryd in https://github.com/HuoCorp/TerraformGoat/pull/87
feat: add kubernetes kubelet anonymous auth scenario by @leveryd in https://github.com/HuoCorp/TerraformGoat/pull/88
feat: add kubernetes kubelet read only port scenario by @leveryd in https://github.com/HuoCorp/TerraformGoat/pull/89
docs: update readme by @leveryd in https://github.com/HuoCorp/TerraformGoat/pull/90
feat: add kubernetes kubelet log mount scenario by @leveryd in https://github.com/HuoCorp/TerraformGoat/pull/91
add apiserver unauth and dashboard vul lab by @qing-root in https://github.com/HuoCorp/TerraformGoat/pull/94
add apiserver unauth and dashboard vul labs by @qing-root in https://github.com/HuoCorp/TerraformGoat/pull/93
feat: add kube-proxy CVE-2020-8558 scenario by @leveryd in https://github.com/HuoCorp/TerraformGoat/pull/95

New Contributors

@leveryd made their first contribution in https://github.com/HuoCorp/TerraformGoat/pull/86
@qing-root made their first contribution in https://github.com/HuoCorp/TerraformGoat/pull/94

Full Changelog: https://github.com/HuoCorp/TerraformGoat/compare/0.0.4...0.0.5

0.0.4

1 year ago

What's Changed

refactor: abbreviated directory name by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/32
feat: add aliyun oss bucket public access scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/33
feat: add aliyun oss bucket readable scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/34
feat: add aliyun oss object acl readable scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/35
feat: add aliyun oss bucket logging disable scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/36
feat: add aliyun oss object public access scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/37
feat: add aliyun oss bucket http enable scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/38
feat: add aliyun oss bucket server side encryption no kms set scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/39
perf: optimize code and readme by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/40
docs: update readme by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/41
feat: add aliyun oss bucket server side encryption not using BYOK sce… by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/42
perf: optimize code and readme by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/43
perf: optimize the output of the sh script by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/44
feat: add tencent cloud cos bucket public access scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/45
feat: add tencent cloud cos object public access scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/46
feat: add tencent cloud cos bucket logging disable scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/47
feat: add tencent cloud cos server side encryption disable scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/48
feat: add tencent cloud cos bucket acl readable scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/49
feat: add aws s3 bucket default encryption disable scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/50
feat: add aws s3 bucket mfa delete is disable scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/51
feat: add aws s3 bucket logging disable scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/52
feat: add aws s3 bucket allow http access scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/53
feat: add aws s3 bucket acl readable scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/54
feat: add aws s3 bucket public access scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/55
add huaweicloud rds by @UzJu in https://github.com/HuoCorp/TerraformGoat/pull/56
Fix: Multiple format problems by @UzJu in https://github.com/HuoCorp/TerraformGoat/pull/58
docs: update readme by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/59
fix: fix aliyun ecs ssrf scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/60
feat: Added huaweicloud obs policy_of_Unrestricted_file_upload challenge by @UzJu in https://github.com/HuoCorp/TerraformGoat/pull/62
feat: add aliyun ecs unattached disks are unencrypted scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/63
feat: add aliyun ecs virtual machine disks are unencrypted scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/64
feat: Added the challenge of configuring insecure security groups in huawei Cloud ECS by @UzJu in https://github.com/HuoCorp/TerraformGoat/pull/66
feat: add aliyun ecs security group open all port scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/67
feat: add aliyun ecs security group open common port scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/68
perf: modify aliyun ecs zone_id to reduce the costs incurred by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/70
feat: add tencent cloud cvm virtual machine disks are unencrypted scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/71
feat: add tencent cloud cvm security group open all port scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/72
feat: add tencent cloud cvm security group open common port scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/73
perf: Package TerraformGoat as a Docker image to enhance the experien… by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/74
docs: update readme by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/75
docs: update readme by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/76

Full Changelog: https://github.com/HuoCorp/TerraformGoat/compare/0.0.3...0.0.4

0.0.3

1 year ago

What's Changed

add: graphic stat info for github events by @hardy4yooz in https://github.com/HuoCorp/TerraformGoat/pull/24
add: add links to demo scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/25
feat: add aws s3 bucket acl writable scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/26
feat: add tencent cloud cos bucket acl writable scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/27
feat: add azure container blob traversal scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/28
feat: add aws console takeover scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/29
feat: add aws iam privilege escalation scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/30
docs: update aliyun README.md by @UzJu in https://github.com/HuoCorp/TerraformGoat/pull/31

Full Changelog: https://github.com/HuoCorp/TerraformGoat/compare/0.0.2...0.0.3

0.0.2

1 year ago

What's Changed

docs: optimize the description of the English readme by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/11
feat: add aliyun ecs ssrf scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/12
fix: fix the problem of missing terraform.tfvars file by @UzJu in https://github.com/HuoCorp/TerraformGoat/pull/14
fix: fix the problem of missing terraform.tfvars file by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/13
feat: add tencent cloud cvm ssrf scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/15
docs: update license by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/16
feat: add huawei cloud ecs ssrf scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/17
docs: update readme by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/18
feat: add azure vm command execution scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/19
feat: add gcp vm command execution scenario by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/20
fix: fix and optimize the install_cloud_cli.sh script by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/21
docs: add demo in readme by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/22
docs: update readme by @teamssix in https://github.com/HuoCorp/TerraformGoat/pull/23

Full Changelog: https://github.com/HuoCorp/TerraformGoat/compare/0.0.1...0.0.2

0.0.1

1 year ago

What's Changed

ci:add lint action for markdown and tf by @hardy4yooz
refactor: restructuring the directory by @teamssix
docs: update readme by @teamssix
update readme by @UzJu
perf: optimize ec2_ssrf vulnerability environment code by @teamssix/pull/4
ci:add tf init and validate recursively by @hardy4yooz
feat:add lint shell by @hardy4yooz
docs: transfer to HuoCorp organization, update readme and code by @teamssixTerraformGoat/pull/9

New Contributors

@hardy4yooz made their first contribution
@teamssix made their first contribution
@UzJu made their first contribution