Comments (7)
Thanks for reporting this! We used source_profile and assumed roles all the time, and i just confirmed locally it works... but based on the error in your last screenshot I'm thinking that this has to do with the mfa_serial
. I'm wondering if this means we're not grabbing everything we need from the AssumeRoleTokenProvider
. I'll look into this. Thanks for such a detailed report.
OK yea i think i figured it out. going to push something to seth-dev in a minute
from cloudfox.
@6mile - Can you try it again with the seth-dev branch?
git clone [email protected]:BishopFox/cloudfox.git
git checkout seth-dev
go build .
./cloudfox aws buckets --profile client-cli-admin
Thanks!
from cloudfox.
Heya @sethsec-bf thanks for jumpin on that! Unfortunately, I'm getting a different error now, and I'm not being prompted for MFA, but I feel like we are getting closer...
@[🦊 cloudfox v1.13.0-prerelease 🦊 ][client-cli-admin] Error retrieving credentials from environment variables, or the instance metadata service.
[🦊 cloudfox v1.13.0-prerelease 🦊 ][client-cli-admin] Could not get caller's identity
Error: operation error STS: GetCallerIdentity, failed to sign request: failed to retrieve credentials: failed to refresh cached credentials, operation error STS: AssumeRole, https response error StatusCode: 400, RequestID: 071a1a4f-04b2-43d9-b678-b88accb36cfa, api error ValidationError: 2 validation errors detected: Value 'theTokenCode' at 'tokenCode' failed to satisfy constraint: Member must have length less than or equal to 6; Value 'theTokenCode' at 'tokenCode' failed to satisfy constraint: Member must satisfy regular expression pattern: [\d]*
from cloudfox.
@6mile - Can you give it another try with the latest code in seth-dev?
I added a new flag --mfa-token that you can use, but you can also just not use that and it should prompt you. feel free to try both and let me know how it works?
from cloudfox.
heya @sethsec-bf that fixed it. Thanks!
from cloudfox.
Closing issue #65
from cloudfox.
I realized that I hadn't tested all scenarios: Not using --mfa-token and supplying the token when I'm prompted; Using the --mfa-token and supplying the MFA token as string on the command line; And finally, with no MFA.
All three appear to work, so will re-close the issue.
from cloudfox.
Related Issues (20)
- Identify Potentially Accessible EC2 Ports HOT 1
- authenticating HOT 1
- [bug] pmapper path lookup not working on linux
- [Bug]AWS "SNS" and "SQS" were not inspected HOT 2
- Lambda Arn not included in CSV and table output HOT 1
- Stacktrace when enumerating EFS Filesystems HOT 3
- List on Homebrew for easier installation and regular updates HOT 8
- No cache data - Error: unexpected EOF HOT 8
- Add VPC / Security group information to instances output
- Add VPC / VPC peering information to output HOT 1
- Windows binary execution error HOT 2
- Bug in ECR command -- has only been showing the first repo
- Go Panic during all-checks HOT 15
- Add Terraform Cloud federated trust identification
- Conditionals of the following format are not captured by the tool when Federated principals in `role-trusts-federated` HOT 1
- Associate container to ECS task in env-vars or ecs-task definitions
- AWS ReadOnlyAccess Update now includes AppRunner perms
- RDS instances not do not show up in aws databases command
- Add compression support for instance user data
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cloudfox.