diff --git a/aws/README.md b/aws/README.md index a927dca..575c2ed 100644 --- a/aws/README.md +++ b/aws/README.md @@ -182,7 +182,7 @@ Deploy the Mondoo Operator to the EKS cluster according the manual [https://mond At first deploy the cert-manager from [https://cert-manager.io/docs/installation/](https://cert-manager.io/docs/installation/): ```bash -kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.9.1/cert-manager.yaml +kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.11.0/cert-manager.yaml ``` ### Deploy Mondoo Operator @@ -720,7 +720,6 @@ cnspec scan k8s --path ../assets/dvwa-deployment.yml cnspec scan container docker.io/pmuench/dvwa-container-escape:latest ``` - ### Scan kubernetes eks cluster ```bash @@ -798,7 +797,7 @@ cnspec shell aws ec2 ssm ssm-user@ ```bash export AWS_REGION=us-east-2 -mondoo shell aws +cnspec shell aws aws.eks.clusters { * } diff --git a/aws/templates/setup_metapreter b/aws/templates/setup_metapreter index 04be588..55106b8 100644 --- a/aws/templates/setup_metapreter +++ b/aws/templates/setup_metapreter @@ -1,5 +1,14 @@ #!/bin/sh +# install all necessary tools +sudo apt update && sudo apt remove -y netcat-openbsd && sudo apt install -y netcat-traditional +sudo apt install -y ca-certificates curl gnupg lsb-release +sudo apt install -y nmap ruby +curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > /tmp/msfinstall +sudo chmod 755 /tmp/msfinstall +sudo /tmp/msfinstall +sudo msfdb init + PUBLIC_IP=$(curl http://169.254.169.254/latest/meta-data/public-ipv4) ROOT_DIR=/home/kali/container-escape