Expand description
Cloud asset discovery scanner.
Derives candidate bucket/account names from the target domain via the
Mozilla Public Suffix List, generates permutations, then probes every
registered CloudProvider in parallel.
§Adding a new cloud provider
- Create
src/{provider}.rsand implementCloudProvider. - Add it to the
providers()constructor in this file — the only change needed.
Modules§
- apigateway
- AWS API Gateway endpoint probing.
- azure
- Azure Blob Storage probe.
- cloudfront
- CloudFront distribution discovery via CNAME probing.
- common
- Shared helpers used by all cloud provider probes.
- do_
spaces - DigitalOcean Spaces probe.
- gcs
- Google Cloud Storage bucket probe.
- inside_
out - Inside-out cloud discovery — uses AWS credentials to find unmapped assets.
- lambda
- AWS Lambda function URL discovery.
- permutations
- Bucket/asset name permutation generation from organization names.
- provider
CloudProvidertrait — the single extension point for new cloud storage backends.- s3
- AWS S3 bucket probe.
Structs§
- Cloud
Scanner - Cloud storage asset scanner — discovers open buckets and containers.