Skip to content

Releases: HXSecurity/TerraformGoat

v0.0.7

30 Nov 08:17
0d436fa
Compare
Choose a tag to compare

What's Changed

  • fix tencent tf

Full Changelog: 0.0.6...0.0.7

v0.0.6

20 Oct 09:48
3b36607
Compare
Choose a tag to compare

What's Changed

Full Changelog: 0.0.5...0.0.6

releases v0.0.5

14 Jul 03:41
980922b
Compare
Choose a tag to compare

What's Changed

  • docs: update readme by @teamssix in #77
  • refactor: optimized scenario directory structure by @teamssix in #78
  • feat: add aws EBS volume encryption is disabled by @teamssix in #79
  • feat: add aws vpc security group open all port by @teamssix in #80
  • feat: add aws vpc security group open common ports by @teamssix in #81
  • refactor: optimized scenario directory structure by @teamssix in #82
  • feat: add aws snapshots of EBS volumes are unencrypted by @teamssix in #83
  • feat: add aws EBS volumes are not used by @teamssix in #84
  • feat: add tencent cloud cbs storage are not used by @teamssix in #85
  • feat: add kubernets etcd unauth scenario by @leveryd in #86
  • feat: add kubernetes etcd grpc-proxy unauth scenario by @leveryd in #87
  • feat: add kubernetes kubelet anonymous auth scenario by @leveryd in #88
  • feat: add kubernetes kubelet read only port scenario by @leveryd in #89
  • docs: update readme by @leveryd in #90
  • feat: add kubernetes kubelet log mount scenario by @leveryd in #91
  • add apiserver unauth and dashboard vul lab by @qing-root in #94
  • add apiserver unauth and dashboard vul labs by @qing-root in #93
  • feat: add kube-proxy CVE-2020-8558 scenario by @leveryd in #95

New Contributors

Full Changelog: 0.0.4...0.0.5

v0.0.4

13 Jun 11:36
74ed643
Compare
Choose a tag to compare

What's Changed

  • refactor: abbreviated directory name by @teamssix in #32
  • feat: add aliyun oss bucket public access scenario by @teamssix in #33
  • feat: add aliyun oss bucket readable scenario by @teamssix in #34
  • feat: add aliyun oss object acl readable scenario by @teamssix in #35
  • feat: add aliyun oss bucket logging disable scenario by @teamssix in #36
  • feat: add aliyun oss object public access scenario by @teamssix in #37
  • feat: add aliyun oss bucket http enable scenario by @teamssix in #38
  • feat: add aliyun oss bucket server side encryption no kms set scenario by @teamssix in #39
  • perf: optimize code and readme by @teamssix in #40
  • docs: update readme by @teamssix in #41
  • feat: add aliyun oss bucket server side encryption not using BYOK sce… by @teamssix in #42
  • perf: optimize code and readme by @teamssix in #43
  • perf: optimize the output of the sh script by @teamssix in #44
  • feat: add tencent cloud cos bucket public access scenario by @teamssix in #45
  • feat: add tencent cloud cos object public access scenario by @teamssix in #46
  • feat: add tencent cloud cos bucket logging disable scenario by @teamssix in #47
  • feat: add tencent cloud cos server side encryption disable scenario by @teamssix in #48
  • feat: add tencent cloud cos bucket acl readable scenario by @teamssix in #49
  • feat: add aws s3 bucket default encryption disable scenario by @teamssix in #50
  • feat: add aws s3 bucket mfa delete is disable scenario by @teamssix in #51
  • feat: add aws s3 bucket logging disable scenario by @teamssix in #52
  • feat: add aws s3 bucket allow http access scenario by @teamssix in #53
  • feat: add aws s3 bucket acl readable scenario by @teamssix in #54
  • feat: add aws s3 bucket public access scenario by @teamssix in #55
  • add huaweicloud rds by @UzJu in #56
  • Fix: Multiple format problems by @UzJu in #58
  • docs: update readme by @teamssix in #59
  • fix: fix aliyun ecs ssrf scenario by @teamssix in #60
  • feat: Added huaweicloud obs policy_of_Unrestricted_file_upload challenge by @UzJu in #62
  • feat: add aliyun ecs unattached disks are unencrypted scenario by @teamssix in #63
  • feat: add aliyun ecs virtual machine disks are unencrypted scenario by @teamssix in #64
  • feat: Added the challenge of configuring insecure security groups in huawei Cloud ECS by @UzJu in #66
  • feat: add aliyun ecs security group open all port scenario by @teamssix in #67
  • feat: add aliyun ecs security group open common port scenario by @teamssix in #68
  • perf: modify aliyun ecs zone_id to reduce the costs incurred by @teamssix in #70
  • feat: add tencent cloud cvm virtual machine disks are unencrypted scenario by @teamssix in #71
  • feat: add tencent cloud cvm security group open all port scenario by @teamssix in #72
  • feat: add tencent cloud cvm security group open common port scenario by @teamssix in #73
  • perf: Package TerraformGoat as a Docker image to enhance the experien… by @teamssix in #74
  • docs: update readme by @teamssix in #75
  • docs: update readme by @teamssix in #76

Full Changelog: 0.0.3...0.0.4

v0.0.3

18 May 07:06
e2e41e5
Compare
Choose a tag to compare

What's Changed

  • add: graphic stat info for github events by @hardy4yooz in #24
  • add: add links to demo scenario by @teamssix in #25
  • feat: add aws s3 bucket acl writable scenario by @teamssix in #26
  • feat: add tencent cloud cos bucket acl writable scenario by @teamssix in #27
  • feat: add azure container blob traversal scenario by @teamssix in #28
  • feat: add aws console takeover scenario by @teamssix in #29
  • feat: add aws iam privilege escalation scenario by @teamssix in #30
  • docs: update aliyun README.md by @UzJu in #31

Full Changelog: 0.0.2...0.0.3

v0.0.2

11 May 07:00
149fb0b
Compare
Choose a tag to compare

What's Changed

  • docs: optimize the description of the English readme by @teamssix in #11
  • feat: add aliyun ecs ssrf scenario by @teamssix in #12
  • fix: fix the problem of missing terraform.tfvars file by @UzJu in #14
  • fix: fix the problem of missing terraform.tfvars file by @teamssix in #13
  • feat: add tencent cloud cvm ssrf scenario by @teamssix in #15
  • docs: update license by @teamssix in #16
  • feat: add huawei cloud ecs ssrf scenario by @teamssix in #17
  • docs: update readme by @teamssix in #18
  • feat: add azure vm command execution scenario by @teamssix in #19
  • feat: add gcp vm command execution scenario by @teamssix in #20
  • fix: fix and optimize the install_cloud_cli.sh script by @teamssix in #21
  • docs: add demo in readme by @teamssix in #22
  • docs: update readme by @teamssix in #23

Full Changelog: 0.0.1...0.0.2

v0.0.1

06 May 05:42
60f1c03
Compare
Choose a tag to compare

What's Changed

  • ci:add lint action for markdown and tf by @hardy4yooz
  • refactor: restructuring the directory by @teamssix
  • docs: update readme by @teamssix
  • update readme by @UzJu
  • perf: optimize ec2_ssrf vulnerability environment code by @teamssix/pull/4
  • ci:add tf init and validate recursively by @hardy4yooz
  • feat:add lint shell by @hardy4yooz
  • docs: transfer to HuoCorp organization, update readme and code by @teamssixTerraformGoat/pull/9

New Contributors