curl error

[securityftw]

curl error

[shivankar-madaan]

@florin2528 are you getting this for AWS audit?

[florin2528]

by running: python cs.py -env aws

[shivankar-madaan]

Ok
I have just ran the cs-suite for aws,with the latest master branch, I couldn't reproduce the error.

Also the curl calls are being made from prowler https://github.com/SecurityFTW/cs-suite/tree/e39adfc6d518ccdfc086e4d89e2bb3ea348c10cb/tools/prowler

could it be possible, if could run prowler separately in cd tools/prowler and then ./prowler
or if I could share more of the error's which you are getting on the console.

[florin2528]

root@ip-10-xx-yy-45:~/cs-suite/tools/prowler# ./prowler
curl: option -: is unknown
curl: try 'curl --help' or 'curl --manual' for more information
curl: option -: is unknown
curl: try 'curl --help' or 'curl --manual' for more information
curl: option -: is unknown
curl: try 'curl --help' or 'curl --manual' for more information
_
_ __ _ __ _____ | | ___ _ __
| ' | '/ _ \ \ /\ / / |/ _ \ '|
| |) | | | () \ V V /| | / |
| ./|| ___/ _/_/ ||___||
|| CIS based AWS Account Hardening Tool

[florin2528]

running the curl commands separately from prowler don't give any error:

root@ip-10-xx-yy-45:~/cs-suite/tools/prowler# curl -s -m 1 http://169.254.169.254/latest/meta-data/iam/security-credentials/
"

<title>404 - Not Found</title>

404 - Not Found

"

[shivankar-madaan]

I guess you are running this from a AWS instance?
I think prowler is trying to authenticate, which can be done in 2 ways

1. Either run aws configure and add the read-only key and secret
2. Or the instance which you are running prowler or cs-suite, should be attached to IAM profile

[florin2528]

yes, that's correct, i'm running from an AWS instance.
The keys are already configured.

but I don't see the connection between curl command syntax error and IAM profile.

[shivankar-madaan]

So here is the code which is doing trying to get the keys
https://github.com/SecurityFTW/cs-suite/blob/master/tools/prowler/prowler#L259

[florin2528]

I solved the issue by adding an IAM role to that instance.
You can close this issue.

thanks for helping out!

[shivankar-madaan]

Thats great
I think this was a genuine issue, you could possibly report it here
https://github.com/toniblyx/prowler