Nimrod Kor
7022dd2c8c
Merge fixes
2020-02-02 10:34:10 +02:00
Nimrod Kor
80d0e4b3b3
Merge branch 'master' into merge_from_tony
...
# Conflicts:
# checks/check_extra716
# checks/check_extra764
2020-02-02 10:32:12 +02:00
Nimrod Kor
17210ab208
Fix /* in bucket ARN
2020-01-30 20:32:14 +02:00
Toni de la Fuente
f797805970
Merge pull request #463 from zfLQ2qx2/issue458
...
Rewrite of check extra73
2020-01-27 18:03:28 -05:00
Toni de la Fuente
ef001af1ec
Merge pull request #461 from zfLQ2qx2/issue459
...
Add additional error checking to address issue 459
2020-01-27 18:01:00 -05:00
Toni de la Fuente
8b5733b5fe
Merge branch 'master' into issue-163-CloudFront-WAF
2020-01-27 17:59:13 -05:00
Toni de la Fuente
425fe16752
Update and rename check_extra772 to check_extra773
2020-01-27 17:57:06 -05:00
Toni de la Fuente
e65a11bc27
Merge branch 'master' into prowler_eip_check
2020-01-27 17:44:59 -05:00
C.J
f735de8836
Rewrite of check extra73
2020-01-26 03:00:45 -05:00
C.J
9fc0f6c61c
Remove check 766, dupe of check 765
2020-01-25 15:29:05 -05:00
C.J
41ccd4517b
Add additional error checking to address issue 459
2020-01-25 15:22:39 -05:00
Nimrod Kor
0c8ad299c5
Catch the case of setting the port range to 0-65535
2020-01-20 17:34:35 -08:00
Fayez Barbari
2f17cfbc30
Check if CloudFront is using a WAF
2020-01-20 17:14:52 -06:00
root
4c1d1887e4
Add Prowler check for unused elastic IP addresses
2020-01-10 15:47:15 -05:00
Toni de la Fuente
b3b903959b
Merge pull request #446 from zfLQ2qx2/cleanup_temp_files
...
Try to make sure prowler cleans up its temporary files
2019-12-31 15:21:33 +01:00
Toni de la Fuente
4806d5fc78
Merge pull request #447 from zfLQ2qx2/update_check_extra764
...
Misc fixes to check extra764
2019-12-31 11:39:21 +01:00
Toni de la Fuente
a755ec806a
Merge pull request #444 from zfLQ2qx2/update_extra769
...
Add additional error checking to check extra769
2019-12-31 11:05:44 +01:00
root
7d324bed65
Resolve issue with not_available state in results
2019-12-30 14:43:51 -05:00
root
b22b0af2ce
Misc fixes to check extra764
2019-12-30 14:20:50 -05:00
root
4cc5cd1ab1
Try to make sure prowler cleans up its temporary files
2019-12-30 13:43:53 -05:00
root
688f028698
Add additional error checkings to check extra769
2019-12-30 11:33:12 -05:00
Toni de la Fuente
74380a62d9
Merge pull request #443 from zfLQ2qx2/update_ecr_checks
...
Add error checking to checks extra77 and extra765
2019-12-30 16:31:27 +01:00
root
c84190c3d9
Add error checking to checks extra77 and extra765
2019-12-30 10:07:14 -05:00
Toni de la Fuente
23be47a9b6
Enhanced title for check extra723
2019-12-27 12:09:35 +01:00
Nimrod Kor
8393383830
Fix credentials
2019-12-26 16:41:25 +02:00
Nimrod Kor
1087d60457
Small check fixes
...
(cherry picked from commit 70879ba1e0
2019-12-18 13:24:31 +02:00
Nimrod Kor
70879ba1e0
Small check fixes
2019-12-18 13:23:51 +02:00
Nimrod Kor
15a58124d7
Merge remote-tracking branch 'tony/master'
2019-12-17 15:28:56 +02:00
Toni de la Fuente
0d120a4536
Merge pull request #437 from bridgecrewio/feature/check_bucket_policies_public_write
...
Check bucket policies public write
2019-12-17 10:41:35 +01:00
Toni de la Fuente
0ab5d87b8f
Merge pull request #433 from kmcquade/check/public-instance-with-instance-profile-attached
...
Added check_extra770, which checks for internet facing instances with an instance profile attached
2019-12-17 10:40:01 +01:00
Toni de la Fuente
933e4152cc
Merge pull request #435 from bridgecrewio/feature/fix_check26
...
Fix check26 - get the account ID from sts
2019-12-17 10:14:11 +01:00
Nimrod Kor
fc3f4e830e
Reuse ACCOUNT_NUM
2019-12-17 09:29:06 +02:00
Nimrod Kor
72976cc225
Feature/check public write buckets ( #5 )
...
* Copy checks to overwrite the old checks in the docker
* Initial commit
* Change to check 771
2019-12-15 18:50:48 +02:00
Nimrod Kor
7e803bb6a9
Change to check 771
2019-12-15 18:18:02 +02:00
Nimrod Kor
2d5d551696
Initial commit
2019-12-15 18:18:02 +02:00
Nimrod Kor
8e1aa17a80
Fix check26 - get the account ID from sts
...
(cherry picked from commit ae20d9c5b7
2019-12-15 15:55:54 +02:00
Nimrod Kor
ae20d9c5b7
Fix check26 - get the account ID from sts
2019-12-15 15:53:46 +02:00
Kinnaird McQuade
3b264d556b
Added check_extra770, which checks for internet facing instances with an Instance Profile attached.
2019-12-12 11:07:14 -05:00
Nimrod Kor
559b0585dc
Add trail count to check21 and fail if no trail exist
...
(cherry picked from commit fcf28dfa70
2019-12-12 09:45:06 +02:00
Nimrod Kor
fcf28dfa70
Add trail count to check21 and fail if no trail exist
2019-12-12 09:42:42 +02:00
Nimrod Kor
2e543b4f50
Merge branch 'master' of https://github.com/toniblyx/prowler
2019-12-05 23:09:21 +02:00
Toni de la Fuente
7b5ece8007
New check IAM Access Analyzer issue #428
2019-12-03 15:58:19 +01:00
Toni de la Fuente
fe65eaf373
New check ECS scan on push issue #427
2019-12-03 15:27:09 +01:00
Nimrod Kor
9d07391a61
Fix unnecessary ``
2019-11-26 17:14:07 +02:00
Toni de la Fuente
dce9d5c96d
Merge pull request #423 from barnhartguy/master
...
Update check_extra768
2019-11-25 10:03:27 +01:00
Nimrod Kor
79b62e0a91
Merge remote-tracking branch 'tony/master'
...
# Conflicts:
# .gitignore
# groups/group11_secrets
2019-11-25 09:35:16 +02:00
Nimrod Kor
302b856804
Merge remote-tracking branch 'tony/master'
...
# Conflicts:
# checks/check_extra742
# checks/check_extra763
2019-11-25 09:34:08 +02:00
Will Thames
2e11e0a3f2
Fix extra764 check
...
Add missing bracket to prevent:
```
jq: error: syntax error, unexpected INVALID_CHARACTER, expecting $end (Unix shell quoting issues?) at <top-level>, line 1:
.Statement[]|select(((.Principal|type == "object") and .Principal.AWS == "*") or ((.Principal|type == "string") and
.Principal == "*")) and .Action=="s3:*" and (.Resource|type == "array") and (.Resource|map({(.):0})[]|has($arn)) and
(.Resource|map({(.):0})[]|has($arn+"/*")) and .Condition.Bool."aws:SecureTransport" == "false")
```
(line breaks added to reduce commit width)
2019-11-25 16:01:26 +10:00
barnhartguy
c630c02a26
Update check_extra768
...
fixed typo
2019-11-24 14:37:09 +02:00
Toni de la Fuente
8f91bfee24
clean up documentation and added info to check_sample
2019-11-22 11:59:03 +01:00
Nimrod Kor