News for hackers. Stuff that matters.

A comment on Show HN: Endgame – An AWS Pentesting tool to backdoor or expose AWS resources. Parent comment

Re:Show HN: Endgame – An AWS Pentesting tool to backdoor or ... by gchamonlive on Tuesday February 16, 2021 @09:59AM (#26154415)
dry run should be the default, and for you to actually do damage, you should explicitly run with a flag like `--commit` or `--deploy-evil-payload "yes I am certain of this"`
[ Parent | on HN ]
Re:Show HN: Endgame – An AWS Pentesting tool to backdoor or ... by kmcquade on Tuesday February 16, 2021 @10:00AM (#26154437)
Dry run as default is a good idea. I'll open a GitHub issue for that.

FWIW, if you run `endgame smash` with `--service all`, then it spits out a huge "WARNING" in ASCII art with an explanation and a confirmation prompt.

But I agree, we should have dry-run on by default.

[ Parent | on HN ]
Re:Show HN: Endgame – An AWS Pentesting tool to backdoor or ... by Serow225 on Tuesday February 16, 2021 @03:01PM (#26158095)
Yes please, thanks!!
[ Parent | on HN ]