Releases: BishopFox/cloudfox
Releases · BishopFox/cloudfox
Release list
v2.0.5
v2.0.4
v2.0.3
v2.0.2
Commits
- 6ac7a0b: Fix secrets command skipping all regions due to stale service slug names (Seth Art) #123
- 11652a9: Fix service slug mismatches for awsservicemap v1.1.0 across all commands (Seth Art) #123
- 83f9af2: Update google.golang.org/grpc to v1.79.3 to fix GO-2026-4762 (Joseph Barcia) #123
- a7e45b9: Bump version to 2.0.2 (Joseph Barcia) #124
v2.0.1
Commits
- 4f2c2cb: Bump go.opentelemetry.io/otel/sdk to v1.40.0 (CVE-2026-24051) (jbarciabf) #122
v2.0.0
Commits
- 83d9611: init (jbarciabf) #121
- 8f6208d: Merge remote-tracking branch 'upstream/main' into cloudfox-gcp-new (jbarciabf) #121
- 69c9070: updates (jbarciabf) #121
- abf1543: added new modules (jbarciabf) #121
- 0df2aa9: updated to include all-projects and added project name to output (jbarciabf) #121
- eae16c3: updated permission module (jbarciabf) #121
- ec9a50e: fixed error handling (jbarciabf) #121
- c9edf84: Update README.md (Seth Art) #117
- 333ca05: fixed error handling, added auto org detection for vpc, added features to whoami (jbarciabf) #121
- 36b45a6: rework (jbarciabf) #121
- 8dddcc8: Merge remote-tracking branch 'upstream/main' into cloudfox-gcp-new (jbarciabf) #121
- fbc862a: updated readme (jbarciabf) #121
- 3c1213b: fixed cloudrun 400 error (jbarciabf) #121
- 7bb7d94: fixed logging newline, more 400 errors, text formatting, and enhancements in dns, filestore, endpoints, and dataefil (jbarciabf) #121
- 8954fc2: fixed permissions denied error (jbarciabf) #121
- ce545ca: updated dataexfil (jbarciabf) #121
- 06a9dab: refactored output to be hierarchical, added privesc checks (jbarciabf) #121
- 31e2fe5: fixed privesc execution and output issues (jbarciabf) #121
- eedf397: created beautified ASCII tree view of the organization hierarchy (jbarciabf) #121
- f3f98f2: add org tree (jbarciabf) #121
- baf62fd: updated whoami for better privesc description (jbarciabf) #121
- d473e31: updated privesc checks (jbarciabf) #121
- 2f80731: updated bucketenum to no limits and enumerate all (jbarciabf) #121
- c94996e: added network diagrams (jbarciabf) #121
- 2b272a1: merged privesc, lat movemet, and data exfil into attack paths (jbarciabf) #121
- 8886496: added attackpath flag (jbarciabf) #121
- 35fca31: updated whoami counts (jbarciabf) #121
- f82547b: updated attackpath output (jbarciabf) #121
- ed732d0: migrated over to sdk and caching for standardization with aws modules (jbarciabf) #121
- 04bb167: updated version number (jbarciabf) #121
- 711e29e: updated readme permissions (jbarciabf) #121
- d24f817: changed global all projects flag (jbarciabf) #121
- 70107c6: updated session handling (jbarciabf) #121
- 44bf8e8: added attackpaths and loot (jbarciabf) #121
- 59bac4e: fixed whoami output and added new attack paths (jbarciabf) #121
- 72a551b: centralized attackpath service and playbooks (jbarciabf) #121
- eb76d76: physical cache instead of memory. 1st wave of cleanup (jbarciabf) #121
- de14130: fixed enumerate regions where permissions were sometimes denied (jbarciabf) #121
- 8a248e3: updated instances (jbarciabf) #121
- 6f45cbe: Fix false positive where GitHub Actions subject was not recognized (Dominik Prodinger) #118
- cb8be67: removed attack paths to use foxmapper instead (jbarciabf) #121
- 7a18090: removed attackpath and orgcache flags and enable by default (jbarciabf) #121
- d021ea5: cleanup output, better streaming and file splitting (jbarciabf) #121
- a8e8024: code cleanup (jbarciabf) #121
- c9d1c2d: normalized loot files and added additional commands (jbarciabf) #121
- 47d69d8: remove alias due to conflict (jbarciabf) #121
- f2d4b7c: updated readme (jbarciabf) #121
- 72cd367: fixed potential panics (jbarciabf) #121
- 8db014b: updated foxmapper mappings (jbarciabf) #121
- 60c6b8d: added log-enum, bigquery-enum, bigtable-enum, spanner-enum to search for sensitive stored data (jbarciabf) #121
- a3b7ab4: rename buckets -> storage (jbarciabf) #121
- a3d1c09: fixed codespell referer error (jbarciabf) #121
- 11763f0: Merge branch 'BishopFox:main' into fix-privesc-false-positive (Dominik Prodinger) #118
v1.17.0
Breaking change announcement
Versions prior to v1.17.0 depend on a json file from AWS that recently changed it's format and no longer work.
Commits
- 00fe4fd: add support for Route53 Alias records in route53 command (Dominic Breuker) #97
- ab4866f: fix bug with route53 alias record processing (Dominic Breuker) #97
- b60f479: Add container name column to ecs-tasks command (edops973) #104
- ed8e0a2: Add task definition column to env-vars command (edops973) #104
- ec497fa: Support kms service for command resource-trusts (edops973) #104
- 5e0eb15: Add resource-trusts KMS unit test (edops973) #104
- 8eec1c3: Add checksum to the release packages (edops973) #104
- 67b84f0: fix kms client nil when running all-checks command (edops973) #104
- 89b3492: Fix the order of input parameters when fetching KMS policy (edops973) #104
- a94bdc1: Remove task definition column in env-vars command (edops973) #104
- f058e1c: Bump version to v1.16.0-prerelease (Seth Art) #104
- 13bd04d: Add support for building Linux Arm64 (CraHan) #102
- 831198c: Support kms service for command resource-trusts (edops973) #104
- 4e75b11: Add resource-trusts KMS unit test (edops973) #104
- cae31fb: fix kms client nil when running all-checks command (edops973) #104
- e494029: Fix the order of input parameters when fetching KMS policy (edops973) #104
- cda06ff: Add container name column to ecs-tasks command (edops973) #104
- d3c042c: Add task definition column to env-vars command (edops973) #104
- 7e64399: Remove task definition column in env-vars command (edops973) #104
- 16c0f4d: Bump version to v1.16.0-prerelease (Seth Art) #104
- 1f4f128: Add checksum to the release packages (edops973) #104
- caaf399: Add feature flag for KMS service in resource-trusts command (edops973) #104
- 7d6d16a: Merge branch 'main' into feature/add-kms-service-to-resource-trusts-command (edops973) #104
- 68d68fc: fix typo in utils.go (Seth Art) #104
- 2391bb7: merge updates (Seth Art) #104
- 6b45f54: Removed block that ran kms even without feature flag. Also edited supported serviecs line to account for feature flag use (Seth Art) #104
- 296710c: Merge conflict (edops973) #104
- a104639: Merge conflict (edops973) #104
- d8e4157: Fix resource-trusts unittest (edops973) #104
- 5d2f261: Merge conflict (edops973) #104
- 43fe99e: Merge conflict (edops973) #104
- 56e64d8: Merge conflict (edops973) #104
- e54ffe8: Merge conflict (edops973) #104
- 2806f7e: Merge conflict (edops973) #104
- 0deb568: Get open search policies (edops973) #104
- 0c858e6: Add missing method in codebuild_mocks.go (edops973) #104
- 7671e7e: Add opensearch unittest (edops973) #104
- dfed049: Ignore public apigateway in resource trusts command (edops973) #104
- 19b825c: Merge remote-tracking branch 'origin' into feature/add-vpcendpoint-to-resource-trusts-command (Seth Art) #104
- d558e1c: Update supported services banner (Seth Art) #104
- 4584774: updated arn column to print full arn (Seth Art) #104
- 00b49aa: Merge branch 'main' into feature/add-opensearch-to-resource-trusts-command (Seth Art) #104
- d0de59d: update opensearch mod (Seth Art) #104
- 2cc97f5: Update version to 1.16.0 (Seth Art) #104
- 0e7b006: Merge branch 'main' into main (Seth Art) #104
- b28ed6a: Update CODEOWNERS (Bastien Faure)
- 5115f84: Update CODEOWNERS (jbarciabf)
- 521cf7e: Reduced the number of times awsservicemap calls out to get the AWS json (Seth Art) #109
- b3a03ec: Fixed small bug with inventory where it was counting total resources incorrectly (Seth Art) #109
- 3dbb98f: Added split level logging to logrus (Seth Art) #109
- 16b3c66: Unified logging around logrus. removed standard logging lines. (Seth Art) #109
- 1bb8576: Added logging for all successfull API calls to cloudfox-info.log (Seth Art) #109
- 52c1285: fixed makefile (jbarciabf) #115
v1.15.0
Commits
- 0a95240: added admin/pmapper logic to principals command (Seth Art) #96
- b31f367: added the the --admin-check-only flag to iam-simulator command (Seth Art) #96
- e0dc71b: updated the adminActionNames check actions to remove ssm get documents and replace with ssm get parameters (Seth Art) #96
- 6b0970e: Fix for cape in regards to permission expansion (Seth Art) #96
- 85b9b11: Bumped version to 1.43.3 (Seth Art) #96
- a88e98a: Removed AWSSSO-ACCOUNTID entries from cape table as they are redundant (Seth Art) #96
- 8e1e8d0: Fix for cape that also makes edges for cross-account explicit trusts. Also added a new flag to ignore certain edges entirely. (Seth Art) #96
- ebf9985: Fix for #92 (Seth Art) #96
- 878d7ec: Fixed bug in cape where files did not exist crash. Fixed bug that duplicated edges because of magenta. (Seth Art) #96
- 9076beb: Bumped version to 1.15.0 (Seth Art) #96
- b3c25bb: spelling fix (Seth Art) #96
v1.14.2
v1.14.2
This tag was signed with the committer’s verified signature.
v1.14.1
v1.14.1
This tag was signed with the committer’s verified signature.
Bug Fixes
Commits
- 91f5f14: Added RDS database instances back into output. I think it's ok to have both clusters and instances in the output (Seth Art) #89
- 0b88bca: Updated tests to make sure that RDS instances without clusters are checked for (Seth Art) #89
- 5ba8b08: Update Makefile to include 386 linux binary for release action (Seth Art) #90
- 0ac24e3: Update utils.go (Seth Art) #90
- 738085d: fix typo from codespell (David) #90