Skip to content

Tags: DataDog/stratus-red-team

Tags

v2.23.1

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Fix incorrect AWS VPC module version (#626) (#637)

v2.23.0

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
New technique: GCP Credential Access via Secret Manager via AccessSec…

…retVersion (#625)

* feat: add gcp secret manager credential access technique

* fix: terraform fmt and cleanup

* chore: code fixes and hygiene

* chore: more code cleanup

* Reflect new Go version requirements in the README

* Add output to warm-up phase

* Use _ as an unused parameter name

* User errors.Is to compare error types

* Remove unnecessary variable assignment

* Enhance and autogenerate docs

* staticcheck: Fix usage of deprecated GCP SDK types

---------

Co-authored-by: Dakota Riley <[email protected]>
Co-authored-by: Christophe Tafani-Dereeper <[email protected]>

v2.22.1

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Increase release CI job runner size

v2.22.0

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Fix AWS SSO support when using the 'sso-session' sections (#629)

* Bump terraform-exec wrapper

* Upgrade the Terraform AWS provider version to be 4.54.0+ to fix AWS SSO support (closes #626)

v2.21.0

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Upgrade AWS SDK v2 submodules (#627)

v2.20.0

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
New attack technique: Persistence through federation (#604)

* add persistence sts federation token technique

* add documentation for sts federation token technique

* Cosmetic changes + logging improvements

* Add delay for eventual consistency

* terraform fmt

---------

Co-authored-by: Christophe Tafani-Dereeper <[email protected]>

v2.19.1

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
[CI] Attempt using a different runner for release job

v2.19.0

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
New Technique: Access Virtual Machine using Bastion shareable link (#583

)

* Add Azure Bastion shareable link technique

* Add delay note for Bastion technique

* Add techniqe documentation

* Change category to persistence

* Fix tf formatting

* Error and string handling + technique rename

* Update v2/internal/attacktechniques/azure/persistence/create-bastion-shareable-link/main.go

Co-authored-by: Christophe Tafani-Dereeper <[email protected]>

* Update v2/internal/attacktechniques/azure/persistence/create-bastion-shareable-link/main.go

Co-authored-by: Christophe Tafani-Dereeper <[email protected]>

* Cosmetic changes

* Add shareable link + credentials to output

* Fix error handling

* autogen docs

---------

Co-authored-by: Christophe Tafani-Dereeper <[email protected]>
Co-authored-by: Christophe Tafani-Dereeper <[email protected]>

v2.18.0

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Release CI: fix timeout

v2.17.0

Verified

This commit was signed with the committer’s verified signature.
christophetd Christophe Tafani-Dereeper
remove deprecated goreleaser version