ENNAENNA

ScoutSuite

GPL-2.0

☁️ Cloud Recon · Python

ScoutSuite is a multi-cloud security auditing tool that assesses the security posture of cloud environments like AWS, Azure, GCP, Alibaba Cloud, and Oracle Cloud. It collects configuration data through cloud provider APIs and analyzes this data for potential security risks and misconfigurations. The tool outputs findings in an easy-to-read HTML report, highlighting issues such as overly permissive access controls. ScoutSuite is valued for its ability to provide a comprehensive security overview across multiple cloud platforms.

7.6kstars
1.2kforks
290issues
Updated 7mo ago
+I use this
View on GitHub

Tags

awsazuregcpcloud-auditmisconfigurationauditingcloudsecurity

Details

Category
☁️ Cloud Recon
Language
Python
License
GPL-2.0
Platforms
🐧linux🍎macos🪟windows

Links

GitHub Repository

github.com/nccgroup/ScoutSuite

Releases

github.com/nccgroup/ScoutSuite/releases

Issues

github.com/nccgroup/ScoutSuite/issues

Sponsored

Your ad here

Reach security professionals and developers - ads@en-na.com

Used in 1 Workflow

☁️

Cloud Security Audit

Intermediate · 7 steps · 4-8 hours

Community Reviews

Alternatives & Comparisons

Cartography

Python

Intel graph of cloud infrastructure. Maps relationships between AWS, GCP, Azure, and other services into a Neo4j graph.

Compare ScoutSuite vs Cartography

Steampipe

Go

Query cloud APIs with SQL. Zero-ETL approach to infrastructure visibility across AWS, Azure, GCP, and 140+ plugins.

Compare ScoutSuite vs Steampipe

cloud_enum

Python

Multi-cloud OSINT enumeration. Discovers public resources across AWS, Azure, and GCP from keyword input.

Compare ScoutSuite vs cloud_enum

CloudFlair

Python

Find origin servers behind Cloudflare. Uses Censys to discover the real IP address of Cloudflare-protected websites.

Compare ScoutSuite vs CloudFlair

WeirdAAL

Python

AWS Attack Library. Enumerate, exploit, and backdoor AWS services with organized modules for cloud penetration testing.

Compare ScoutSuite vs WeirdAAL

Checkov

Python

Static analysis for infrastructure-as-code scanning Terraform, CloudFormation, and K8s.

Compare ScoutSuite vs Checkov

More in Cloud Recon

CloudMapper

Python

Analyze AWS environments to create network diagrams and identify security risks.

awsnetwork-diagramvisualization

S3Scanner

Go

Scan for misconfigured S3 buckets across AWS regions and dump accessible contents.

s3awsbucket

CloudBrute

Go

Cloud infrastructure enumerator to find company assets across multiple cloud providers.

cloudenumerationassets

MicroBurst

PowerShell

PowerShell toolkit for attacking Azure services including storage, key vaults, and automation.

azurepowershellstorage

ROADtools

Python

Framework for Azure AD enumeration and exploitation via the internal ROADrecon and ROADlib modules.

azure-adenumerationactive-directory

CloudFox

Go

Find exploitable attack paths in cloud infrastructure by enumerating IAM permissions, secrets, and network exposure.

cloud-attack-pathsiam-enumerationaws