NAME
cloud_enum - enumerates public resources matching user requested keyword
SYNOPSIS
cloud_enum [OPTIONS] [ARGS] ...
DESCRIPTION
Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud. Currently enumerates the following:
Amazon Web Services:
Open / Protected S3 Buckets
awsapps (WorkMail, WorkDocs, Connect, etc.)
Microsoft Azure:
Storage Accounts
Open Blob Storage Containers
Hosted Databases
Virtual Machines
Web Apps
Google Cloud Platform
Open / Protected GCP Buckets
Open / Protected Firebase Realtime Databases
Google App Engine sites
Cloud Functions (enumerates project/regions with existing functions, then brute forces actual function names)
OPTIONS
- -h, --help
-
Show this help message and exit.
- -k KEYWORD, --keyword KEYWORD
-
Keyword. Can use argument multiple times.
- -kf KEYFILE, --keyfile KEYFILE
-
Input file with a single keyword per line.
- -m MUTATIONS, --mutations MUTATIONS
-
Mutations. Default: /usr/lib/cloud-enum/enum_tools/fuzz.txt.
- -b BRUTE, --brute BRUTE
-
List to brute-force Azure container names. Default: /usr/lib/cloud-enum/enum_tools/fuzz.txt.
- -t THREADS, --threads THREADS
-
Threads for HTTP brute-force. Default = 5.
- -ns NAMESERVER, --nameserver NAMESERVER
-
DNS server to use in brute-force.
- -l LOGFILE, --logfile LOGFILE
-
Will APPEND found items to specified file.
- -f FORMAT, --format Format
-
Format for log file (text,json,csv - defaults to text)
- --disable-aws
-
Disable Amazon checks.
- --disable-azure
-
Disable Azure checks.
- --disable-gcp
-
Disable Google checks.
- -qs, --quickscan
-
Disable all mutations and second-level scan.
EXAMPLES
cloud_enum -k keyword
cloud_enum -k keyword -t 10
cloud_enum -k somecompany -k somecompany.io -k blockchaindoohickey
AUTHOR
Written by initstring <[email protected]>
This manual page was written by Guilherme de Paula Xavier Segundo <[email protected]> for the Debian project (but may be used by others).