Releases: RhinoSecurityLabs/cloudgoat
Releases · RhinoSecurityLabs/cloudgoat
Release v2.5.0
What's Changed
- Fixed readme formatting for author by @TeneBrae93 in #412
- Scenario | iam_enum_basics by @TeneBrae93 in #413
- Add dependabot.yml set to ignore scenario dependencies by @nobodynate in #415
- Bump flake8 from 7.1.2 to 7.3.0 by @dependabot[bot] in #416
- Bump requests from 2.32.4 to 2.32.5 by @dependabot[bot] in #417
- Bump argcomplete from 3.6.0 to 3.6.3 by @dependabot[bot] in #418
- Bump black from 25.1.0 to 25.11.0 by @dependabot[bot] in #419
- Bump boto3 from 1.37.15 to 1.42.72 by @dependabot[bot] in #420
- Release v2.5.0 by @github-actions[bot] in #422
Full Changelog: v2.4.0...v2.5.0
Release v2.4.0
What's Changed
- Bump requests from 2.32.3 to 2.32.4 by @dependabot[bot] in #368
- Fixed destroy_all_scenarios whitelist bug by @morepoints in #380
- feat: update default instance type to t3.micro for AWS Free Tier compatibility by @Kyul-l in #400
- Add additional free tier instance type validations by @nobodynate in #401
- Replace hardcoded AMI with dynamic Ubuntu AMI lookup for cloud_breach_s3 by @nobodynate in #402
- Created ATTACK-MATRIX.md for beanstalk_secrets by @Singh-Gurparas in #373
- Scenario : s3_version_rollback_via_cfn by @jeonyubyeong in #374
- Scenario | agentcore_identity_confusion by @sonrai-nigelsood in #387
- Scenario | bedrock_agent_hijacking by @nobodynate in #403
- SNS_Secrets - Dynamic API Key by @TeneBrae93 in #389
- Scenario | Static by @TeneBrae93 in #390
- Scenario | data_secrets by @TeneBrae93 in #391
- Update cheat_sheet.md walkthrough by @nobodynate in #404
- Standardize terraform provider file and minimum Terraform version by @nobodynate in #405
- Add ecs_privesc_evade_protection scenario by @nobodynate in #406
- Fix Python versions in test workflow by @nobodynate in #407
- Fix: Move ecs_privesc_evade_protection to correct directory by @nobodynate in #408
- Remove deprecated Terraform 1.5 from CI testing by @nobodynate in #409
- Release v2.4.0 by @github-actions[bot] in #410
New Contributors
- @morepoints made their first contribution in #380
- @Kyul-l made their first contribution in #400
- @Singh-Gurparas made their first contribution in #373
- @jeonyubyeong made their first contribution in #374
- @sonrai-nigelsood made their first contribution in #387
Full Changelog: v2.3.1...v2.4.0
Release v2.3.1
What's Changed
- Contributing a new AWS scenario: federated_console_takeover by @Jimmy-Barrios in #367
- Bugfixes, refactor and rename by @andrew-aiken in #369
- Bugfix and Refactor RCE Web App by @andrew-aiken in #365
- Fix sns_secrets scenario by @TeneBrae93 in #372
- Release v2.3.1 by @github-actions[bot] in #382
Full Changelog: v2.3.0...v2.3.1
Release v2.3.0
What's Changed
- Fixed beanstalk ec2 by @TeneBrae93 in #347
- Updated Beanstalk Secrets to dynamically grab the correct solution stack by @TeneBrae93 in #352
- Changed action trigger to pull_request by @nobodynate in #353
- changed docker validation action trigger to pull_request by @nobodynate in #356
- Update Name Regex in beanstalk_secrets terraform by @TeneBrae93 in #359
- Contributing a new AWS scenario: vpc_peering_overexposed by @Jimmy-Barrios in #361
- Release v2.3.0 by @github-actions in #364
New Contributors
- @Jimmy-Barrios made their first contribution in #361
Full Changelog: v2.2.1...v2.3.0
Release v2.2.1
What's Changed
- Update README.md by @nobodynate in #342
- Update all the links on the main readme by @TeneBrae93 in #343
- Updated solution stack for Beanstalk by @TeneBrae93 in #345
- Release v2.2.1 by @github-actions in #346
Full Changelog: v2.2.0...v2.2.1
Release v2.2.0
What's Changed
- Added Azure by @nobodynate in #327
- fix folders by @DaveYesland in #336
- fix_action_find_scenario_command by @DaveYesland in #337
- Fixed action. Only runs on new or modified scenararios by @nobodynate in #338
- need to checkout the PR by @nobodynate in #339
- Scenario/datafactory secrets by @DaveYesland in #335
- Release v2.2.0 by @github-actions in #340
Full Changelog: v2.1.0...v2.2.0
Release v2.1.0
What's Changed
- New Scenario: Beanstalk Secrets by @TeneBrae93 in #303
- Fix scenario location by @TeneBrae93 in #332
- Release v2.1.0 by @github-actions in #333
Full Changelog: v2.0.1...v2.1.0
Release v2.0.1
What's Changed
- Merge to master by @SpenGietz in #1
- Spencer merge by @SpenGietz in #2
- Changed policies around by @SpenGietz in #3
- Random ec2 password + policy name fix by @SpenGietz in #4
- many changes. Fully integrated Glue, changed lambda functions around,… by @SpenGietz in #5
- added codebuild and added status message for Glue by @SpenGietz in #6
- Remove glue by @SpenGietz in #7
- updated readme by @SpenGietz in #8
- Python3 support by @SpenGietz in #11
- fixed random string generation to support Mac by @SpenGietz in #12
- EC2 instance profile policy fix by @SpenGietz in #16
- Bob update by @SpenGietz in #17
- Fixed the glue development endpoint to include the CloudGoat SSH key … by @SpenGietz in #18
- Removed #cloud-boothook to execute UserData on instance start by @LukaszMrozowski in #21
- Update cheat_sheet.md by @mtulio in #33
- Feature/add docker by @jack-ganbold in #35
- Add a warning for AWS creds mount by @jack-ganbold in #36
- Add README badges and cute ☁️🐐 emoji by @jack-ganbold in #37
- Updating tags RE: Request #34 by @yogisec in #38
- Update ec2.tf in rce_web_app by @sebastian-mora in #60
- Update cheat_sheet_mcduck.md by @sebastian-mora in #59
- Update ec2.tf by @sebastian-mora in #56
- Update cheat_sheet_raynor.md by @AumSecResearch in #51
- Update cheat_sheet_kerrigan.md by @sebastian-mora in #45
- Added cgid in resources for ec2_ssrf by @hamstah in #44
- Use cgid in resource names for iam_privesc_by_rollback by @hamstah in #43
- Scenario/lambda_privesc by @sgn00 in #64
- Scenario Ecs_efs attack by @sebastian-mora in #77
- Bump pyyaml from 5.1.1 to 5.4 in /core/python by @dependabot in #82
- Typo fix in ecs_efs_attack cheatsheet command to list the privileges by @pankajmouriya in #81
- Fix missing scenario page. by @naikordian in #78
- Update README.md by @sn0x736e in #73
- Update cheat_sheet_chris.md by @sidejackthenativity in #76
- Docker improvements by @hamstah in #42
- Update author's name in lambda_privesc scenario by @sgn00 in #70
- Update cheat_sheet_kerrigan.md by @gchib297 in #67
- Support terraform v0.14+ by @RyanJarv in #84
- Fixed version check for terraform destroy command. by @j0eblow in #93
- Correction to Lara cheat sheet by @j0eblow in #95
- Fix for spelling and grammar issues in README.md by @j0eblow in #94
- New Scenario: ECS_Takover by @sebastian-mora in #91
- Help fixes + change create to always runs apply by @RyanJarv in #97
- Ensure resource names (S3 bucket, RDS, load balancer) do not contain invalid characters (closes #98, #100) by @christophetd in #102
- Use requests to get the IP instead of shell to curl by @hamstah in #41
- Fix CGID naming for codebuild_secrets by @RyanJarv in #106
- Reduce IAM permissions used in ec2_ssrf by @RyanJarv in #104
- Fix broken IAM policy in ec2_ssrf scenario by @christophetd in #112
- First version of the CI/CD scenario by @christophetd in #116
- Update README for CI/CD scenario by @christophetd in #117
- Bump undefsafe from 2.0.2 to 2.0.5 in /scenarios/rce_web_app/assets/rce_app by @dependabot in #118
- Scenario/lambda sql injection by @RyanJarv in #111
- Bump ajv from 6.10.0 to 6.12.6 in /scenarios/rce_web_app/assets/rce_app by @dependabot in #121
- Bump tar from 4.4.8 to 4.4.19 in /scenarios/rce_web_app/assets/rce_app by @dependabot in #120
- Make requirements.txt more visible by @RyanJarv in #109
- Update README.md by @BaronSam3di in #132
- Set scripts executable by @bashtoni in #129
- Scenario/detection evasion by @RyanJarv in #142
- CICD Scenario: Remove tf lock file and loosen dependencies by @RyanJarv in #135
- Fix missing step in ecs_efs_attack cheat sheet. by @HLOverflow in #127
- Updated the lambda python version in two scenarios by @sethsec-bf in #150
- Force config whitelist --auto to use IPv4 by @RyanJarv in #110
- Updated Lambda runtime by @barnesrobert in #159
- Update vulnerable_lambda manifest.yaml file by @n3ddih in #164
- detection_evasion: fixed filter pattern for instance profile usage by @andrew-kline in #143
- Update rds.tf by @Artemis357 in #155
- Added a new scenario vulnerable_cognito by @usamaazad in #166
- Bump decode-uri-component from 0.2.0 to 0.2.2 in /scenarios/rce_web_app/assets/rce_app by @dependabot in #161
- Bump json5 and rc-config-loader in /scenarios/rce_web_app/assets/rce_app by @dependabot in #162
- Add Tests via GitHub actions by @jdearmas in #178
- Update README.md by @usamaazad in #177
- Updated main README to add scenario description by @usamaazad in #176
- Fix Typo in README.md by @galoget in #194
- Update s3.tf by @j0eblow in #193
- Update ec2.tf by @j0eblow in #192
- Update cheat_sheet.md by @lazzslayer in #204
- Update Vulnerable Cognito by @andrew-aiken in #213
- Scenario | IAM Privesc by Key Rotation by @andrew-aiken in #221
- Fix Detection Evasion Scenario by @andrew-aiken in #218
- fixing typo by @gauravphoenix in #225
- Bugfix CodeBuild Secrets by @andrew-aiken in #217
- Fixing Issues with ECR Removal & SSM Connectivity by @andrew-aiken in #215
- Refactor | RCE Web App by @andrew-aiken in #216
- Fix Typo in README.md by @Hosim33 in #237
- Refactor/cloud breach s3 by @andrew-aiken in #214
- Enhancement | ECS EFS Attack Scenario by @andrew-aiken in #220
- ECS Takeover | x86_64 AMI by @andrew-aiken in #219
- Format vulnerable lambda by @andrew-aiken in #229
- Update example scenario by @andrew-aiken in #226
- Flagshop and rds snapshot add summary by @West-wise in https://github....