v1.2.0

Changelog

• New! The auto-generated documentation page of every attack technique now contains detection documentation.
• Added aws.discovery.ec2-download-user-data

v1.1.0

Added new attack technique: Execution using EC2 User Data

See https://stratus-red-team.cloud/attack-techniques/AWS/aws.execution.ec2-user-data/

v1.0.0

Changelog

• fd86ba4 Brew formula update for stratus-red-team version v0.0.21
• fb64986 Update 3rd party csv
• 022fe06 Update 3rd party csv
• de49e4b bug: Allow Terraform to download modules at runtime, when running in Docker

v0.0.21

Changelog

• b6014fa Add Docker usage instructions
• 9644126 Add more descriptive output to aws.persistence.iam-backdoor-role
• f8b9321 Add reversion function to aws.persistence.backdoor-iam-role (closes #65)
• fcae684 Avoid using aws.String function when a string pointer can be passed
• 11871fb Brew formula update for stratus-red-team version v0.0.20
• 3c27944 Ensure all attack techniques have dedicated detonate/revert functions
• 49750d0 Fix docs examples and add link to docs in stratus list/show output
• e6b3dba Revert showing docs links in stratus show to avoid coupling with the docs
• 6ce0bac Use consistent naming convention for all attack technique IDs

v0.0.20

Changelog

• 63d7240 Add projects to readme
• 1851d22 Add screen recording
• 923a7d0 Add static analysis on main branch and PR
• 5baf617 Brew formula update for stratus-red-team version v0.0.19
• 4e0b528 Fix code warnings and typos
• 258c346 Fix missing version in Dockerfile
• f9ab525 Fix static analysis issues
• ca36a73 Fix typo
• 5ce787c New attack technique: Disable CloudTrail Logging Through Event Selectors
• 83f7405 New attack technique: Exfiltrate an RDS snapshot
• 1dd1aa1 New attack technique: Retrieve And Decrypt SSM Parameters
• 4b4bfbc Set a custom user-agent when accessing the AWS API
• 7b83ce1 Typo in attack technique description
• 9092b75 Update README.md
• 9573eef add unit tests for utility package
• d600003 bug: Ensure Secrets Manager secrets are removed properly
• c2690c6 grammar: Replace all occurrences of 'pre-requisite' with 'prerequisite'
• 7d85aeb terraform fmt

v0.0.19

Changelog

• 870bb2c Add CloudGoat to comparison (#46)
• e18da38 Add GuardDuty Tester to comparison (closes #49)
• 9fd2af1 Add acknowledgments in README
• 625619e Add aws-vault usage example with IAM user (closes #37)
• 299b031 Add better error handling when the default AWS region is not set
• f1881d4 Add coloring of attack technique state (closes #45)
• fece828 Add commands reference (closes #31)
• b7dfd5e Add disclaimer about production usage (closes #56)
• d7cfbf2 Add examples and documentation about programmatic usage (closes #40)
• 6ae714d Add idempotency concept (closes #36)
• 0e9ae9c Add link to basic usage examples
• 94e6dc5 Add note about future platforms (closes #38)
• 8595df8 Add reversion function to aws.persistence.iam-user-create-login-profile
• 57e0a78 Better attack techniques description and formatting (closes #44)
• 6918e28 Have GoReleaser update the HomeBrew formula on the main branch
• 19d0249 Remove DS_Store
• 2be4afd Remove unused constant
• bbf2f32 Removed unused TODO file
• 838dfa2 docs and contributing documentation (closes #3)
• 6be6c70 extract magic string in constant
• 5714a3e gitignore

v0.0.18

Changelog

• 3b64fc4 Add CLI usage examples
• 6fd40ab Add stratus cleanup --all command (closes #26)
• 708e2ca Brew formula update for stratus-red-team version v0.0.17
• 06c9d81 Enhance usage instructions in CLI (closes #28)
• 79e61bb New technique: CloudTrail logs impairement through lifecycle rule

v0.0.17

Changelog

v0.0.16

Changelog

• 25c0dfb #30: Allow marking a technique as 'slow' in the docs
• 5d5228e Brew formula update for stratus-red-team version v0.0.15
• e3548f9 Have GoReleaser update the HomeBrew formula on a separate branch
• 906c44c Remove old docs
• a7f22ef Terraform formatting

v0.0.15

Changelog

• a54527a Attack technique: Retrieve a High Number of Secrets Manager secrets
• 1c5040a Brew formula update for stratus-red-team version v0.0.14
• 652c623 Change name of main binary
• d5a9b3d Correct reamde instructions for docs
• 40da5c7 Fix build version in Docker build