cloud_enum

NAME

cloud_enum - enumerates public resources matching user requested keyword

SYNOPSIS

cloud_enum [OPTIONS] [ARGS] ...

DESCRIPTION

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud. Currently enumerates the following:

Amazon Web Services:
Open / Protected S3 Buckets
awsapps (WorkMail, WorkDocs, Connect, etc.)

Microsoft Azure:
Storage Accounts
Open Blob Storage Containers
Hosted Databases
Virtual Machines
Web Apps

Google Cloud Platform
Open / Protected GCP Buckets
Open / Protected Firebase Realtime Databases
Google App Engine sites
Cloud Functions (enumerates project/regions with existing functions, then brute forces actual function names)

OPTIONS

-h, --help

Show this help message and exit.

-k KEYWORD, --keyword KEYWORD

Keyword. Can use argument multiple times.

-kf KEYFILE, --keyfile KEYFILE

Input file with a single keyword per line.

-m MUTATIONS, --mutations MUTATIONS

Mutations. Default: /usr/lib/cloud-enum/enum_tools/fuzz.txt.

-b BRUTE, --brute BRUTE

List to brute-force Azure container names. Default: /usr/lib/cloud-enum/enum_tools/fuzz.txt.

-t THREADS, --threads THREADS

Threads for HTTP brute-force. Default = 5.

-ns NAMESERVER, --nameserver NAMESERVER

DNS server to use in brute-force.

-l LOGFILE, --logfile LOGFILE

Will APPEND found items to specified file.

-f FORMAT, --format Format

Format for log file (text,json,csv - defaults to text)

--disable-aws

Disable Amazon checks.

--disable-azure

Disable Azure checks.

--disable-gcp

Disable Google checks.

-qs, --quickscan

Disable all mutations and second-level scan.

EXAMPLES

cloud_enum -k keyword

cloud_enum -k keyword -t 10

cloud_enum -k somecompany -k somecompany.io -k blockchaindoohickey

AUTHOR

Written by initstring <initstring@protonmail.com>

This manual page was written by Guilherme de Paula Xavier Segundo <guilherme.lnx@gmail.com> for the Debian project (but may be used by others).