Ryan Gerstenkorn

Results 16 issues of Ryan Gerstenkorn

**Brief Description** IAM roles blocking access without MFA return incorrect results when calling `local_check_authorization_handling_mfa`. These roles also fail to appear in the output of `python ./pmapper.py --profile me query 'preset...

bug

It's a pain when this doesn't work as expected, it also prevents use cases like #266, using Pacu with aws-vault, or running in EC2 with the instance profile attached to...

One thing that bugs me about current tools is there's no single tool (afik, let me know if I missed something) that can give you a very high level overview...

enhancement
V2 Idea

I suspect using steampipe with a sqlalchemy wrapper would eliminate a fair amount of enumeration code in the modules. Right now I have a proof of concept for using this...

enhancement
V2 Idea

* Don't kill Pacu on Ctrl-C * Ctrl-D is the right way to end a shell session, Ctrl-C should more likely kill a running module. * Support using credentials from...

enhancement

Several PR's where merged recently adding various modules, the page at https://github.com/RhinoSecurityLabs/pacu/wiki/Module-Details needs to be updated to reflect this.

**Describe the bug** When executing steampipe as apart of a while loop, with a static query passed on the command line steampipe will consume stdin input meant for the while...

bug

This causes a lot of headaches during development, you either have to destroy/recreate or copy code manually. This seems to have resulted in several fixes missing from PRs I've worked...

enhancement

This changes the Dockerfile to be based on the upstream docker container rather then pulling the executable down ourselves. Before we where accidentally fetching the arm64 version, which of course...

Currently `./cloudgoat.py config whitelist --auto` breaks when IPv6 is available. This monkey patches the requests library to force use of IPv4. This should be ok since the scenarios don't support...