gossan-cloud 0.3.3

Cloud asset discovery scanner for gossan (S3, GCS, Azure Blob, DigitalOcean Spaces), part of the security research ecosystem
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64

# Azure Blob Storage container definitions.
#
# Common container names in Azure Blob Storage accounts.
# These containers are probed to discover public exposures.
#
# The $web container is special, it's the static website hosting container
# and is the highest-value target for reconnaissance.
#
# Users can extend these definitions by creating a custom TOML file.

[[container]]
name = "$web"
description = "static website hosting container"
severity_if_exposed = "critical"

[[container]]
name = "public"
description = "public assets container"
severity_if_exposed = "high"

[[container]]
name = "assets"
description = "static assets container"
severity_if_exposed = "high"

[[container]]
name = "static"
description = "static files container"
severity_if_exposed = "high"

[[container]]
name = "files"
description = "file storage container"
severity_if_exposed = "high"

[[container]]
name = "uploads"
description = "user uploads container"
severity_if_exposed = "critical"

[[container]]
name = "media"
description = "media files container"
severity_if_exposed = "high"

[[container]]
name = "images"
description = "image storage container"
severity_if_exposed = "high"

[[container]]
name = "docs"
description = "documents container"
severity_if_exposed = "high"

[[container]]
name = "backup"
description = "backup storage container"
severity_if_exposed = "critical"

[[container]]
name = "data"
description = "general data container"
severity_if_exposed = "high"