v2.23.2

Changelog

Chores:

• d5d25ab (chores) Bump library versions
• 039a1c1 Brew formula update for stratus-red-team version v2.23.1 (#638)
• 83d6cdf Bump actions/setup-python from 5.3.0 to 5.4.0 (#641)
• d33e734 Bump actions/upload-artifact from 4.6.0 to 4.6.1 (#639)
• f06d33f Bump actions/upload-artifact from 4.6.1 to 4.6.2 (#665)
• d9178c3 Bump alpine from 3.21.2 to 3.21.3 (#645)
• 526166e Bump docker/build-push-action from 6.13.0 to 6.15.0 (#643)
• bf4ee08 Bump docker/login-action from 3.3.0 to 3.4.0 (#668)
• e577bba Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 in /v2 (#662)
• 959efe6 Bump github/codeql-action from 3.28.10 to 3.28.13 (#667)
• 60a57f1 Bump github/codeql-action from 3.28.8 to 3.28.10 (#640)
• 1888409 Bump golang from 1.23.5-alpine3.20 to 1.24.0-alpine3.20 (#644)
• 4c7a189 Bump golang from 1.24.0-alpine3.20 to 1.24.1-alpine3.20 (#670)
• 4af315f Bump ossf/scorecard-action from 2.4.0 to 2.4.1 (#666)
• efc931b Bump step-security/harden-runner from 2.10.4 to 2.11.0 (#642)
• 508060e Update armcompute to v4 to remove indirect dependency on github.com/golang-jwt/jwt (#687)

Enhancements:

• db34471 fix: adds WaitForInstancesToRegisterInSSM to ec2-enumerate-from-instance technique (#664)

Documentation:

• aa4e8d3 Coverage matrices: Update styling (#660)
• c1104b7 Autogenerate attack tactics visualization 95 (#613) by @tmendonca28
• a0c4124 Remove old attack technique documentation (closes #661)
• cc6aaad [docs] Display MITRE ATT&CK tactics in appropriate order (closes #658) (#659)

v2.23.1

Changelog

Bug fixes:

• 38d847d Fix incorrect AWS VPC module version (#626) (#637)

v2.23.0

Changelog

Features:

• New Google Cloud attack technique: Retrieve a High Number of Secret Manager secrets by @rileydakota (#625)

v2.22.1

Changelog

This version does not contain any code changes. It was released to test a fix in the CI release process.

v2.22.0

Changelog

Bug fixes:

• 19909e7 Fix AWS SSO support when using the 'sso-session' sections (#629)

Chores:

• 8758bd3 Update go.mod and go.sum

NOTE: The minor semver version was bumped (instead of the patch) because upgrading the Terraform AWS provider version for dozens of attack techniques is a somewhat large change.

v2.21.0

Changelog

Features:

• 61b3b0b Upgrade AWS SDK v2 submodules (#627). NOTE: This is supposed to be a patch semver bump, but considering that AWS does not have proper semver in place (per #448), bumping the minor seems safer.

Chores:

• 654edae Add blank space before instance-id in log.Println (#597)
• bc97a20 Brew formula update for stratus-red-team version v2.20.0 (#607)
• 9f660df Bump actions/upload-artifact from 4.4.3 to 4.6.0 (#620)
• 45b338a Bump alpine from 3.20.3 to 3.21.2 (#618)
• c2d47c0 Bump docker/build-push-action from 6.7.0 to 6.13.0 (#622)
• 8077c1b Bump github/codeql-action from 3.27.0 to 3.28.8 (#623)
• c23aea5 Bump golang from 1.23.2-alpine3.20 to 1.23.5-alpine3.20 (#619)
• c84202d Bump goreleaser/goreleaser-action from 6.0.0 to 6.1.0 (#603)
• 0aa5600 Bump step-security/harden-runner from 2.10.1 to 2.10.4 (#621)
• 63a79bb Update new issue label link in contributing.md (#617)

v2.20.0

Changelog

• 1dfcf0c Brew formula update for stratus-red-team version v2.19.1 (#595)
• d57c508 New attack technique: Persistence through federation (#604)
• a912e7f New attack technique: Usage of SendSerialConsoleSSHPublicKey on multiple instances (#599)

New attack techniques:

• Usage of EC2 Serial Console to push SSH public key by @adanalvarez
• Generate temporary AWS credentials using GetFederationToken by @adanalvarez

v2.19.1

Changelog

• ced3b50 Brew formula update for stratus-red-team version v2.19.0 (#586)
• 2313a93 Bump actions/checkout from 4.2.0 to 4.2.2 (#589)
• 50a20a9 Bump actions/setup-go from 5.0.2 to 5.1.0 (#592)
• 41e3d44 Bump actions/setup-python from 5.2.0 to 5.3.0 (#588)
• cadcccf Bump actions/upload-artifact from 4.4.0 to 4.4.3 (#590)
• 6c86e1a Bump github/codeql-action from 3.26.10 to 3.27.0 (#587)
• c8b558f Bump golang from 1.21.13-alpine3.20 to 1.23.2-alpine3.20 (#591)
• 79f30e2 [CI] Attempt using a different runner for release job
• fd0755c [CI] Fix Goreleaser timeout
• ab1fcf9 feat(deps): bump s3 deps (#593)

v2.19.0

Changelog

New attack technique by @siigil: Access Virtual Machine using Bastion shareable link (Azure)

v2.18.0

Changelog

New features:

• New attack technique: Invoke Bedrock Model (#581) by @Brucedh and @christophetd