NixDaemon

NixOS pentest workstation as one flake — IceBreaker's successor
git clone https://git.daemon-sec.xyz/NixDaemon.git
Log | Files | Refs | README

cloud.nix (523B)

      1 # modules/features/pentest/cloud.nix — cloud and container assessment.
      2 # Off by default. `daemon.pentest.cloud.enable = true;`
      3 { lib, ... }:
      4 (import ./_sets.nix { inherit lib; }) {
      5   name = "cloud";
      6   description = "AWS, Azure, GCP and Kubernetes assessment";
      7   default = false;
      8 
      9   packages = pkgs: with pkgs; [
     10     awscli2 # `aws`
     11     azure-cli # `az`
     12     google-cloud-sdk # `gcloud`
     13     kubectl
     14     trivy
     15     kube-hunter
     16     pacu
     17   ];
     18 
     19   expectedBins = [ "aws" "az" "gcloud" "kubectl" "trivy" "kube-hunter" "pacu" ];
     20 }