Code

SECENG-1343 - Update 2024Q2#8

Code

Merged

arevelo-bc merged 48 commits intobrightcovebrightcove/domain-protect:brightcovefrom update_2024q2brightcove/domain-protect:update_2024q2Copy head branch name to clipboardApr 29, 2024

+716-140

Commits

Commits on Dec 11, 2023

• Refactor manual aws_alias_cloudfront and add integration tests

  christophetd

  committed
  60a59b1

  Copy full SHA for 60a59b1

• Fix detection for Route53 CNAME record to CloudFront

  christophetd

  committed
  0c9f98f

  Copy full SHA for 0c9f98f

• Update detection logic for CloudFront subdomain takeover manual scanning rules

  christophetd

  committed
  dcb97c1

  Copy full SHA for dcb97c1

• Bump actions/setup-python from 4 to 5

  Show description for df358ff
  dependabot[bot]

  authored
  df358ff

  Copy full SHA for df358ff

• Add unittest for s3 bucket URL check

  christophetd

  committed
  2bb0e1d

  Copy full SHA for 2bb0e1d

• Add support for S3 bucket website URLs

  christophetd

  committed
  df0f8f1

  Copy full SHA for df0f8f1

Commits on Dec 12, 2023

• Update manual_scans/aws/README.md

  christophetd

  authored
  1497604

  Copy full SHA for 1497604

• Support checking for S3 existence through S3 bucket URL

  christophetd

  committed
  c1a8222

  Copy full SHA for c1a8222

• Update utils/utils_aws_manual.py

  christophetd

  authored
  27fbaf3

  Copy full SHA for 27fbaf3

• Merge pull request domain-protect#246 from domain-protect/fix-cloudfront-alias-to-s3

  Show description for ee783af
  christophetd

  authored
  ee783af

  Copy full SHA for ee783af

Commits on Dec 13, 2023

• Merge pull request domain-protect#247 from domain-protect/dependabot/github_actions/actions/setup-python-5

  Show description for 2e972f7
  paulschwarzenberger

  authored
  2e972f7

  Copy full SHA for 2e972f7

Commits on Dec 18, 2023

• Bump github/codeql-action from 2 to 3

  Show description for c1ae86b
  dependabot[bot]

  authored
  c1ae86b

  Copy full SHA for c1ae86b

• Merge pull request domain-protect#249 from domain-protect/dependabot/github_actions/github/codeql-action-3

  Show description for 4d8db33
  paulschwarzenberger

  authored
  4d8db33

  Copy full SHA for 4d8db33

• put new cloudfront functions into utils for reuse by lambdas

  paulschwarzenberger

  committed
  846bcfd

  Copy full SHA for 846bcfd

• formatting

  paulschwarzenberger

  committed
  c3a85d6

  Copy full SHA for c3a85d6

• Merge pull request domain-protect#250 from domain-protect/cloudfront-s3-terraform

  Show description for cf66682
  paulschwarzenberger

  authored
  cf66682

  Copy full SHA for cf66682

• update Lambdas with new CloudFront S3 detection

  paulschwarzenberger

  committed
  0f519d8

  Copy full SHA for 0f519d8

• update Lambdas with new CloudFront S3 detection

  paulschwarzenberger

  committed
  bc719a9

  Copy full SHA for bc719a9

• add regex to requirements.txt files

  paulschwarzenberger

  committed
  e07597d

  Copy full SHA for e07597d

• install regex package

  paulschwarzenberger

  committed
  ab7101d

  Copy full SHA for ab7101d

Commits on Dec 19, 2023

• updated modules

  paulschwarzenberger

  committed
  5924d63

  Copy full SHA for 5924d63

• updated modules

  paulschwarzenberger

  committed
  4b75e18

  Copy full SHA for 4b75e18

Commits on Dec 20, 2023

• cname cloudfront detecting OK

  paulschwarzenberger

  committed
  1a8b73c

  Copy full SHA for 1a8b73c

• detect fixed cloudfront S3 vulnerability

  paulschwarzenberger

  committed
  186f698

  Copy full SHA for 186f698

• prevent incorrectly reporting as fixed

  paulschwarzenberger

  committed
  8bd534e

  Copy full SHA for 8bd534e

• updates to ensure successful S3 takeover

  paulschwarzenberger

  committed
  30ee64d

  Copy full SHA for 30ee64d

• unit tests for new function

  paulschwarzenberger

  committed
  c68e8af

  Copy full SHA for c68e8af

• reorder imports

  paulschwarzenberger

  committed
  37151ff

  Copy full SHA for 37151ff

Commits on Dec 21, 2023

• reduce code duplication

  paulschwarzenberger

  committed
  d8be102

  Copy full SHA for d8be102

• Merge pull request domain-protect#251 from domain-protect/lambda-cloudfront-s3

  Show description for 8c8cde4
  paulschwarzenberger

  authored
  8c8cde4

  Copy full SHA for 8c8cde4

Commits on Feb 12, 2024

• Bump pre-commit/action from 3.0.0 to 3.0.1

  Show description for 1799f55
  dependabot[bot]

  authored
  1799f55

  Copy full SHA for 1799f55

Commits on Feb 13, 2024

• Merge pull request domain-protect#252 from domain-protect/dependabot/github_actions/pre-commit/action-3.0.1

  Show description for 143b9c1
  paulschwarzenberger

  authored
  143b9c1

  Copy full SHA for 143b9c1

Commits on Feb 18, 2024

• fix typos

  jxdv

  committed
  ac52446

  Copy full SHA for ac52446

• Merge pull request domain-protect#253 from jxdv/typos

  Show description for 836af8c
  paulschwarzenberger

  authored
  836af8c

  Copy full SHA for 836af8c

Commits on Mar 25, 2024

• Upgrade Black

  paulschwarzenberger

  committed
  f1a7d3f

  Copy full SHA for f1a7d3f

• Upgrade Prospector

  paulschwarzenberger

  committed
  33ec37e

  Copy full SHA for 33ec37e

• Reorder imports

  paulschwarzenberger

  committed
  6a99d01

  Copy full SHA for 6a99d01

• Merge pull request domain-protect#255 from domain-protect/upgrade-black

  Show description for 6ea5ae0
  paulschwarzenberger

  authored
  6ea5ae0

  Copy full SHA for 6ea5ae0

Commits on Apr 14, 2024

• Upgrade dnspython to 2.6.1

  paulschwarzenberger

  committed
  c20398d

  Copy full SHA for c20398d

• Merge pull request domain-protect#263 from domain-protect/upgrade-dnspython

  Show description for b227858
  paulschwarzenberger

  authored
  b227858

  Copy full SHA for b227858

• Release 0.4.6

  paulschwarzenberger

  committed
  2c6ee98

  Copy full SHA for 2c6ee98

• Merge pull request domain-protect#264 from domain-protect/v0-4-6

  Show description for 3eb424a
  paulschwarzenberger

  authored
  3eb424a

  Copy full SHA for 3eb424a

Commits on Apr 17, 2024

• skips an alias in distributions if there is no Items key in it

  derrickkliseVEVO

  committed
  6b427d3

  Copy full SHA for 6b427d3

• Merge pull request domain-protect#266 from domain-protect/account-for-no-items-in-distribution-aliases

  Show description for 37d5c56
  paulschwarzenberger

  authored
  37d5c56

  Copy full SHA for 37d5c56

• release 0.4.7

  paulschwarzenberger

  committed
  5d91754

  Copy full SHA for 5d91754

• Merge pull request domain-protect#267 from domain-protect/v0.4.7

  Show description for 4cafdff
  paulschwarzenberger

  authored
  4cafdff

  Copy full SHA for 4cafdff

Commits on Apr 29, 2024

• Merge branch 'domain-protect:main' into update_2024q2

  arevelo-bc

  authored
  5f17b8c

  Copy full SHA for 5f17b8c

• Delete .whitesource

  arevelo-bc

  authored
  6e20d0b

  Copy full SHA for 6e20d0b