-
Notifications
You must be signed in to change notification settings - Fork 217
Closed
Description
Description of Bug
When running cloudfox aws all-checks the program crashes during the privesc phase with:
[resource-trusts][666412488974-AIDAJBTEDJEDFGHJKLWJU] Supported Services: CodeBuild, ECR, EFS, Glue, Lambda, SecretsManager, S3, SNS, SQS
failed to get shared config profile, 116412344578-AIDAJBTEDJEDFGHJKLWJU
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x2 addr=0x18 pc=0x101022724]
goroutine 9981 [running]:
github.com/BishopFox/cloudfox/internal.AWSConfigFileLoader({_, _}, {_, _}, {_, _})
github.com/BishopFox/cloudfox/internal/aws.go:67 +0x3e4
github.com/BishopFox/cloudfox/aws.initCloudFoxS3Client({_, _, _, {_}, {}}, {_, _}, {_, _}, {_, ...})
github.com/BishopFox/cloudfox/aws/client-initializers.go:48 +0x80
github.com/BishopFox/cloudfox/aws.(*ResourceTrustsModule).getS3Buckets(0x140011a4580, 0x100157644?, 0x14002196660, 0x140006733f0?)
github.com/BishopFox/cloudfox/aws/resource-trusts.go:371 +0x114
created by github.com/BishopFox/cloudfox/aws.(*ResourceTrustsModule).PrintResources in goroutine 1
github.com/BishopFox/cloudfox/aws/resource-trusts.go:94 +0x8c8
What should the expected behavior be
Not crash
Platform Affected
macOS Darwin 21.6.0 ARM64 (macOS Monterey)
Steps to Reproduce
- Install via
brew - Use
aws-vaultto start an authenticated shell with STS credentials - Run
cloudfox aws all-checks
cyberbutler
Metadata
Metadata
Assignees
Labels
No labels