ScoutSuite : Security Auditing Tool

ScoutSuite is a multi-cloud security auditing tool, which enables assessing the security posture of cloud environments, ScoutSuite gathers configuration data for manual inspection and highlights risk areas.

ScoutSuite Rather than pouring through dozens of pages on the web consoles,ScoutSuite provides a clear view of the attack surface automatically.

Support

The following cloud providers are currently supported/planned:

• Amazon Web Services
• Google Cloud Platform (beta)
• Azure (early alpha)

Installation

Install via pip:

$ pip install scoutsuite

Install from source:

$ git clone https://github.com/nccgroup/ScoutSuite
$ cd ScoutSuite
$ virtualenv -p python3 venv
$ source venv/bin/activate
$ pip install -r requirements.txt
$ python Scout.py --help

Usage

The following command will provide the list of available command line options:

$ python Scout.py --help

Azure

Using a computer already configured to use azure-cli, you may use Scout using the following command:

$ python Scout.py --provider azure --azure-cli

When using Scout in an Azure virtual machine with the Reader role, you may use Scout using the following command:

$ python Scout.py --provider azure --azure-msi

When using Scout with a Service Principal, you may run Scout using the following command:

$ python Scout.py --provider azure --azure-service-principal

When using Scout with an authentication file, you may run Scout using the following command:

$ python Scout.py --provider azure --azure-file-auth path/to/auth/file

When using Scout against your user account, you may run Scout using the following command:

$ python Scout.py --provider azure --azure-user-credentials

Download Here

Books Reverse Engineering for Beginners

ModSecurity Framework FTW

WAScan – Web Application Scanner