Pepe Fagoaga
625384ad6d
feat(network-acls): include checks in networking and internetexposed checks
2021-04-24 13:38:36 +02:00
Pepe Fagoaga
056190cfc9
feat(network-acls): change textFail to textInfo because NACLs are stateless
2021-04-24 13:24:33 +02:00
Pepe Fagoaga
8f784a4548
feat(network-acls): include checks to test NetworkACLs open to 22, 3389 and any port
2021-04-24 13:13:41 +02:00
Pepe Fagoaga
f1185213e8
Merge branch 'master' of github.com:toniblyx/prowler
2021-04-22 18:30:48 +02:00
Pepe Fagoaga
cb60085779
New Networking checks for FTP, Telnet, SQL Server and Kafka ( #2 )
...
* feat(aws-securitygroups): include new control to test ingress from 0.0.0.0/0 or ::/0 to FTP ports 20 or 21
* feat(aws-securitygroups): include extra control 7134 in extra group
* feat(aws-securitygroups): include new control to test ingress from 0.0.0.0/0 or ::/0 to Kafka port 9092
* feat(aws-securitygroups): include new control to test ingress from 0.0.0.0/0 or ::/0 to Telnet port 23
* feat(aws-securitygroups): include new control to test ingress from 0.0.0.0/0 or ::/0 to Microsoft SQL Server ports 1433 or 1434
* feat(aws-securitygroups): include extra controls 7135, 7136 and 7137 in extra and internet-exposed groups
2021-04-22 18:29:12 +02:00
Toni de la Fuente
583cffaefb
2.4.1 @toniblyx
...
2.4.1 @toniblyx
2021-04-15 10:22:00 +02:00
Toni de la Fuente
721b15d105
Fixed issue #776
2021-04-15 09:30:31 +02:00
Toni de la Fuente
53117819fc
Fixed credentials renew issue #775
2021-04-14 11:47:38 +02:00
Toni de la Fuente
2552f2977d
Fixed issue #775
2021-04-12 21:23:28 +02:00
Toni de la Fuente
8a04f40a80
Fixed issue #774
2021-04-12 20:20:04 +02:00
Toni de la Fuente
b0fd6ce60f
Merge pull request #773 from toniblyx/2.4
...
v2.4
2021-04-09 15:51:44 +02:00
Toni de la Fuente
e4edc2fa2c
Improved feature to refresh assume role credentials before it expires
2021-04-09 15:13:13 +02:00
Toni de la Fuente
10d062960e
Updated screenshots
2021-04-08 00:35:12 +02:00
Toni de la Fuente
7f24aab715
Updated README
2021-04-08 00:22:07 +02:00
Toni de la Fuente
3dfca9c9dd
Improved html output with scoring information
2021-04-08 00:14:24 +02:00
Toni de la Fuente
dacfea6b32
Included Risk, Remediation and Link support for CSV and HTML outputs
2021-04-07 18:42:44 +02:00
Toni de la Fuente
574a9c94b0
Added Risk, Remediation and Link to html report
2021-04-07 18:40:50 +02:00
Toni de la Fuente
7bace94e08
Fixed servicename variable in extra72
2021-04-07 18:39:14 +02:00
Toni de la Fuente
778910eff3
Added new logo to README.md header
2021-04-06 17:32:55 +02:00
Toni de la Fuente
755f7d952f
Added new logo
2021-04-06 17:15:33 +02:00
Toni de la Fuente
d02e1967dc
Improved PublicIP discovery used in Shodan check_extra7102 @as-km
...
Improved PublicIP discovery used in Shodan check_extra7102 @as-km
2021-04-06 13:05:27 +02:00
Mateusz
d77001356a
use describe-network-interfaces instead of describe-addresses in order to get public IPs #768
2021-04-06 12:57:11 +02:00
Toni de la Fuente
e85d8b2a9d
Add check23 to group17_internetexposed group @RyanJarv
...
Add check23 to group17_internetexposed group @RyanJarv
2021-04-06 12:01:52 +02:00
Toni de la Fuente
4f16c8dec5
Merge pull request #766 from toniblyx/revert-765-patch-2
...
Revert "Add check23 to group17_internetexposed group"
2021-04-05 21:17:35 +02:00
Toni de la Fuente
236ce1fb21
Revert "Add check23 to group17_internetexposed group"
2021-04-05 21:16:58 +02:00
Toni de la Fuente
15230ae6f3
Add check23 to group17_internetexposed @RyanJarv
...
Add check23 to group17_internetexposed @RyanJarv
2021-04-05 21:16:54 +02:00
Ryan Gerstenkorn
6c5776106f
Add check23 to group17_internetexposed group
...
This add's the following check to group17.
* 2.3 [check23] Ensure the S3 bucket CloudTrail logs to is not publicly accessible (Scored)
2021-04-05 12:07:08 -07:00
Toni de la Fuente
4100d1dbfd
Replace empty space with '\s' in check43 regex @frannovo
...
Replace empty space with '\s' in check43 regex @frannovo
2021-04-05 15:49:04 +02:00
Toni de la Fuente
abcd299559
Add get_regions function in order to call after assume_role @HG00
...
Add get_regions function in order to call after assume_role @HG00
2021-04-05 15:35:54 +02:00
Toni de la Fuente
f6049a0597
Merge branch '2.4' into master
2021-04-05 15:27:31 +02:00
HG00
bb397baa8a
Add get_regions function in order to call after assume_role
2021-03-30 11:53:24 +00:00
Toni de la Fuente
c0f3265754
Better handle permissions and errors
2021-03-24 15:41:51 +01:00
Toni de la Fuente
9614b6fc82
Merge branch '2.4' of https://github.com/toniblyx/prowler into 2.4
2021-03-24 15:12:48 +01:00
Toni de la Fuente
a9d56be81a
Added risk, remediation, doc link and caf epic to checks 742 to 7133
2021-03-24 15:12:32 +01:00
Toni de la Fuente
0c4111efda
Moved assume role before listing regions fixes issue #744
2021-03-24 15:11:00 +01:00
Toni de la Fuente
5fb2e496a9
Added risk, remediation, doc link and caf epics to controls 1 to 741 @pablopagani
...
Added risk, remediation, doc link and caf epics to controls 1 to 741 @pablopagani
2021-03-24 14:36:54 +01:00
Pablo Pagani
7b4dae634e
Merge branch '2.4' of https://github.com/pablopagani/prowler into 2.4
2021-03-24 10:23:04 -03:00
Pablo Pagani
35a22a71cd
added risk remediation doc and epics to controls 1 to 741
2021-03-24 10:22:29 -03:00
Toni de la Fuente
21f817b087
Removed textInfo extra information on extra712
2021-03-24 12:30:59 +01:00
Toni de la Fuente
923dc3403b
Added risk, remediation, doc link and epics to first 3 checks @pablopagani
...
Added risk, remediation, doc link and epics to first 3 checks
2021-03-24 09:08:19 +01:00
Pablo Pagani
68d240939c
added risk, remediation doc and epics to firts 3 checks
2021-03-23 15:23:55 -03:00
Pablo Pagani
a9d0649122
added risk, remediation doc and epics to firts 3 checks
2021-03-23 15:19:23 -03:00
Fran Novo
3eeba2ef4e
Replace empty space with '\s' in check43 regex
2021-03-15 17:45:49 +01:00
Toni de la Fuente
806eaa0b98
Updated ProwlerExecRoleAdditionalViewPrivileges Policy with lambda:GetFunction
...
Updated ProwlerExecRoleAdditionalViewPrivileges Policy with lambda:GetFunction
2021-03-11 14:27:52 +01:00
Pepe Fagoaga
2cd8d15410
Merge pull request #1 from toniblyx/master
...
Include missing AWS function policy to check AWS Lambda
2021-03-11 13:33:11 +01:00
Toni de la Fuente
d8473cfe87
Include missing AWS function lambda:GetFunction policy in prowler-additions-policy.json to check AWS Lambda @jfagoagas
...
Include missing AWS function lambda:GetFunction policy in prowler-additions-policy.json to check AWS Lambda @jfagoagas
2021-03-11 13:13:06 +01:00
Pepe Fagoaga
34625ff4e7
fix: include lambda:GetFunction in prowler policy to check AWS Lambda related controls: extra720,extra759,extra760,extra762,extra798
2021-03-11 12:48:32 +01:00
Toni de la Fuente
097ddbb957
Added extra7133 RDS multi-AZ
2021-03-04 20:29:40 +01:00
Toni de la Fuente
db1380422f
Added high level architecture
2021-02-25 11:56:45 +01:00
Toni de la Fuente
669cb6f1a9
Added IAM to extra7100 title
2021-02-25 11:56:22 +01:00
