Toni de la Fuente
bc959a23f1
License file and banner cosolidation
2021-07-04 12:32:50 +02:00
Geoff
4961498562
Added parameter to report resource name
...
Added a third parameter to checks textFail and textPass to identify resource name in finding.
2021-06-16 22:25:44 -05:00
Toni de la Fuente
1229815c04
Add WAF CLASSIC check for extra7129 @kamiryo
...
Add WAF CLASSIC check for extra7129 @kamiryo
2021-06-11 17:17:28 +02:00
kamiryo
79a0eb622d
Add WAF CLASSIC check for extra7129
2021-06-10 23:13:17 +09:00
Toni de la Fuente
701d5687be
Fixed issue #811 @h1008
...
Fixed issue #811 @h1008
2021-06-08 14:50:59 +02:00
h1008
5aeb670a84
Fixed issue #811
2021-06-05 11:57:04 +02:00
Toni de la Fuente
124ae0fd2e
Fixed kms keys compatibility in cli v2 and v1
2021-06-02 17:53:12 +02:00
Toni de la Fuente
96b9accea8
New check extra7142 ALB Header Check request smuggling @Outrun207
...
New check extra7142 ALB Header Check request smuggling @Outrun207
2021-06-01 12:27:07 +02:00
Toni de la Fuente
324a1002a5
Fix finding customer kms keys in cli v2 for checks extra737 extra736 @dbellizzi
...
Fix finding customer kms keys in cli v2 for checks extra737 extra736 @dbellizzi
2021-06-01 12:24:19 +02:00
Toni de la Fuente
55e703540e
Fixed typo in check extra7141 ID
2021-05-31 18:47:56 +02:00
Dom Bellizzi
baf5232cbc
Fix finding customer kms keys in cli v2 for checks extra737 extra736
...
Key id is in position 6 in aws cli version 2.2.5, but in position 4 in aws cli 1.x
Use --query to select only the data necessary and output in a consistent format
2021-05-29 22:27:15 +00:00
Josh Moss
e3893c7d5b
Update check_extra7142
2021-05-25 13:49:27 -04:00
Josh Moss
229d9ba00c
ALB Header Check
2021-05-20 12:36:30 -04:00
Toni de la Fuente
78e5dc5dba
Added new check extra7141 to detect secrets in SSM Documents
2021-05-18 18:28:15 +02:00
Toni de la Fuente
1655bdb902
Added resource id to RDS checks and in json,csv,html outputs
2021-05-18 16:57:37 +02:00
Toni de la Fuente
30442b2da7
Added new check extra7140 for public SSM Documents
2021-05-18 16:10:55 +02:00
Toni de la Fuente
501082876c
Fixed alias of extra7139
2021-05-18 16:08:10 +02:00
Toni de la Fuente
8d9ca987b5
Added link to doc for check45 check46 extra7138 and extras
2021-05-18 15:41:45 +02:00
Toni de la Fuente
46c6f44055
Merge branch '2.5' into new-acls-checks
2021-05-18 15:34:27 +02:00
Toni de la Fuente
7c65430508
Improved error handling when listing regions @pablopagani
...
Improved error handling when listing regions @pablopagani
2021-05-04 15:39:25 +02:00
Pablo Pagani
ce00f3a019
improved error handling. Added check 7139 .
2021-05-01 17:33:54 -03:00
Pepe Fagoaga
2727b7e8e2
fix(network-acls): update resource type to match AWS documentation
2021-04-28 18:50:20 +02:00
Pepe Fagoaga
2dc1ce61ec
fix(network-acls): fix line typo
2021-04-26 12:30:44 +02:00
Pepe Fagoaga
056190cfc9
feat(network-acls): change textFail to textInfo because NACLs are stateless
2021-04-24 13:24:33 +02:00
Pepe Fagoaga
8f784a4548
feat(network-acls): include checks to test NetworkACLs open to 22, 3389 and any port
2021-04-24 13:13:41 +02:00
Pepe Fagoaga
f1185213e8
Merge branch 'master' of github.com:toniblyx/prowler
2021-04-22 18:30:48 +02:00
Pepe Fagoaga
cb60085779
New Networking checks for FTP, Telnet, SQL Server and Kafka ( #2 )
...
* feat(aws-securitygroups): include new control to test ingress from 0.0.0.0/0 or ::/0 to FTP ports 20 or 21
* feat(aws-securitygroups): include extra control 7134 in extra group
* feat(aws-securitygroups): include new control to test ingress from 0.0.0.0/0 or ::/0 to Kafka port 9092
* feat(aws-securitygroups): include new control to test ingress from 0.0.0.0/0 or ::/0 to Telnet port 23
* feat(aws-securitygroups): include new control to test ingress from 0.0.0.0/0 or ::/0 to Microsoft SQL Server ports 1433 or 1434
* feat(aws-securitygroups): include extra controls 7135, 7136 and 7137 in extra and internet-exposed groups
2021-04-22 18:29:12 +02:00
Toni de la Fuente
0e33e066cd
Added 4 new checks to look for FTP, Telnet, SQL Server and Kafka open ports @jfagoagas
...
Added 4 new checks to look for FTP, Telnet, SQL Server and Kafka open ports @jfagoagas
2021-04-20 17:23:48 +02:00
Pepe Fagoaga
4327333d00
feat(aws-securitygroups): include new control to test ingress from 0.0.0.0/0 or ::/0 to Microsoft SQL Server ports 1433 or 1434
2021-04-19 19:28:10 +02:00
Pepe Fagoaga
ab43a8b717
feat(aws-securitygroups): include new control to test ingress from 0.0.0.0/0 or ::/0 to Telnet port 23
2021-04-19 19:26:10 +02:00
Pepe Fagoaga
595bcba1d9
feat(aws-securitygroups): include new control to test ingress from 0.0.0.0/0 or ::/0 to Kafka port 9092
2021-04-19 19:24:31 +02:00
Pepe Fagoaga
2ac96cf29a
feat(aws-securitygroups): include new control to test ingress from 0.0.0.0/0 or ::/0 to FTP ports 20 or 21
2021-04-19 19:18:23 +02:00
Toni de la Fuente
8a04f40a80
Fixed issue #774
2021-04-12 20:20:04 +02:00
Toni de la Fuente
7bace94e08
Fixed servicename variable in extra72
2021-04-07 18:39:14 +02:00
Mateusz
d77001356a
use describe-network-interfaces instead of describe-addresses in order to get public IPs #768
2021-04-06 12:57:11 +02:00
Toni de la Fuente
4100d1dbfd
Replace empty space with '\s' in check43 regex @frannovo
...
Replace empty space with '\s' in check43 regex @frannovo
2021-04-05 15:49:04 +02:00
Toni de la Fuente
9614b6fc82
Merge branch '2.4' of https://github.com/toniblyx/prowler into 2.4
2021-03-24 15:12:48 +01:00
Toni de la Fuente
a9d56be81a
Added risk, remediation, doc link and caf epic to checks 742 to 7133
2021-03-24 15:12:32 +01:00
Toni de la Fuente
5fb2e496a9
Added risk, remediation, doc link and caf epics to controls 1 to 741 @pablopagani
...
Added risk, remediation, doc link and caf epics to controls 1 to 741 @pablopagani
2021-03-24 14:36:54 +01:00
Pablo Pagani
35a22a71cd
added risk remediation doc and epics to controls 1 to 741
2021-03-24 10:22:29 -03:00
Toni de la Fuente
21f817b087
Removed textInfo extra information on extra712
2021-03-24 12:30:59 +01:00
Pablo Pagani
68d240939c
added risk, remediation doc and epics to firts 3 checks
2021-03-23 15:23:55 -03:00
Pablo Pagani
a9d0649122
added risk, remediation doc and epics to firts 3 checks
2021-03-23 15:19:23 -03:00
Fran Novo
3eeba2ef4e
Replace empty space with '\s' in check43 regex
2021-03-15 17:45:49 +01:00
Toni de la Fuente
097ddbb957
Added extra7133 RDS multi-AZ
2021-03-04 20:29:40 +01:00
Toni de la Fuente
669cb6f1a9
Added IAM to extra7100 title
2021-02-25 11:56:22 +01:00
Toni de la Fuente
fa2a40f5c0
Fix output on extra731
2021-02-23 18:27:38 +01:00
Toni de la Fuente
80b94eb667
Fix output on extra731
2021-02-23 18:24:26 +01:00
Toni de la Fuente
2883de016e
Ensure check28 only looks at symmetric keys
2021-02-22 23:15:06 +01:00
Toni de la Fuente
5d7d9efa69
Revert "check28 only look at symmetric keys"
2021-02-22 23:05:05 +01:00
