Skip to content

Commit

Permalink
moved sns/sqs to another section in all-checks
Browse files Browse the repository at this point in the history
  • Loading branch information
sethsec-bf committed Mar 27, 2023
1 parent 537d064 commit 3652866
Showing 1 changed file with 26 additions and 26 deletions.
52 changes: 26 additions & 26 deletions cli/aws.go
Original file line number Diff line number Diff line change
Expand Up @@ -1352,6 +1352,32 @@ func runAllChecksCommand(cmd *cobra.Command, args []string) {
}
networkPorts.PrintNetworkPorts(AWSOutputFormat, AWSOutputDirectory)

sqsMod := aws.SQSModule{
SQSClient: sqsClient,

StorePolicies: StoreSQSAccessPolicies,

Caller: *Caller,
AWSRegions: internal.GetEnabledRegions(profile, cmd.Root().Version),
AWSProfile: profile,
Goroutines: Goroutines,
WrapTable: AWSWrapTable,
}
sqsMod.PrintSQS(AWSOutputFormat, AWSOutputDirectory, Verbosity)

snsMod := aws.SNSModule{
SNSClient: snsClient,

StorePolicies: StoreSNSAccessPolicies,

Caller: *Caller,
AWSRegions: internal.GetEnabledRegions(profile, cmd.Root().Version),
AWSProfile: profile,
Goroutines: Goroutines,
WrapTable: AWSWrapTable,
}
snsMod.PrintSNS(AWSOutputFormat, AWSOutputDirectory, Verbosity)

// IAM privesc section
fmt.Printf("[%s] %s\n", cyan(emoji.Sprintf(":fox:cloudfox :fox:")), green("IAM is complicated. Complicated usually means misconfigurations. You'll want to pay attention here."))
principals := aws.IamPrincipalsModule{
Expand Down Expand Up @@ -1410,32 +1436,6 @@ func runAllChecksCommand(cmd *cobra.Command, args []string) {
}
iamSimulator.PrintIamSimulator(SimulatorPrincipal, SimulatorAction, SimulatorResource, AWSOutputFormat, AWSOutputDirectory, Verbosity)

sqsMod := aws.SQSModule{
SQSClient: sqsClient,

StorePolicies: StoreSQSAccessPolicies,

Caller: *Caller,
AWSRegions: internal.GetEnabledRegions(profile, cmd.Root().Version),
AWSProfile: profile,
Goroutines: Goroutines,
WrapTable: AWSWrapTable,
}
sqsMod.PrintSQS(AWSOutputFormat, AWSOutputDirectory, Verbosity)

snsMod := aws.SNSModule{
SNSClient: snsClient,

StorePolicies: StoreSNSAccessPolicies,

Caller: *Caller,
AWSRegions: internal.GetEnabledRegions(profile, cmd.Root().Version),
AWSProfile: profile,
Goroutines: Goroutines,
WrapTable: AWSWrapTable,
}
snsMod.PrintSNS(AWSOutputFormat, AWSOutputDirectory, Verbosity)

fmt.Printf("[%s] %s\n", cyan(emoji.Sprintf(":fox:cloudfox :fox:")), green("That's it! Check your output files for situational awareness and check your loot files for next steps."))
fmt.Printf("[%s] %s\n\n", cyan(emoji.Sprintf(":fox:cloudfox :fox:")), green("FYI, we skipped the outbound-assumed-roles module in all-checks (really long run time). Make sure to try it out manually."))
}
Expand Down

0 comments on commit 3652866

Please sign in to comment.