⚠️ Malware / Trojaner / VirenBe alert: targeted attacks on prominent Rustaceans(17.09.2026 um 02:00 Uhr)
🔧 ProgrammierungWINDOW FUNCTIONS(17.09.2026 um 19:50 Uhr)
🔧 Programmierung🚀 bro.js v2.4.5 – Next.js Adapter & AI‑First DX(17.09.2026 um 19:58 Uhr)
🔧 ProgrammierungRDS vs DynamoDB: How I Think About Choosing an AWS Database(17.09.2026 um 20:00 Uhr)
⚠️ Malware / Trojaner / VirenBe alert: targeted attacks on prominent Rustaceans(17.09.2026 um 02:00 Uhr)
🔧 ProgrammierungWINDOW FUNCTIONS(17.09.2026 um 19:50 Uhr)
🔧 Programmierung🚀 bro.js v2.4.5 – Next.js Adapter & AI‑First DX(17.09.2026 um 19:58 Uhr)
🔧 ProgrammierungRDS vs DynamoDB: How I Think About Choosing an AWS Database(17.09.2026 um 20:00 Uhr)
📰 IT Security Nachrichten 🕛 vor 5 Jahren 4 Min Lesezeit SECURITY-FEED
0

Cloudlist - A Tool For Listing Assets From Multiple Cloud Providers

↗ Quelle (feedproxy.google.com)
🔬 IoC Intelligence (5 Indikatoren erkannt)
1[.]1[.]12[.]22[.]23[.]3[.]334[.]4[.]4[.]455[.]5[.]56[.]6ec405badb974fd3d891c9223245f9ab5871c127fce9e632c8dc421edd46d7242
🗣️ Stimme:
to augment Attack Surface page. Extract them using tar, move it to your $PATHand you're ready to go.

CODE
Download latest binary from https://github.com/projectdiscovery/cloudlist/releases

▶ tar -xvf cloudlist-linux-amd64.tar
▶ mv cloudlist-linux-amd64 /usr/local/bin/cloudlist
▶ cloudlist -h

From Source

cloudlist requires go1.14+ to install successfully. Run the following command to get the repo -

CODE
▶ GO111MODULE=on go get -v github.com/projectdiscovery/cloudlist/cmd/cloudlist

From Github
CODE
▶ git clone https://github.com/projectdiscovery/cloudlist.git; cd cloudlist/cmd/cloudlist; go build; cp cloudlist /usr/local/bin/; cloudlist -version

Configuration file

The default config file should be located in $HOME/.config/cloudlist/config.yaml and has the following contents as an example. In order to run this tool, the keys need to updated in the config file.

CODE
# Configuration file for cloudlist  for scaleway API
scaleway_access_token: xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxx

- # provider is the name of the provider (Amazon Web Services)
provider: aws
# pro file is the name of the provider profile
profile: staging
# aws_access_key is the access key for AWS account
aws_access_key: AKIAXXXXXXXXXXXXXX
# aws_secret_key is the secret key for AWS account
aws_secret_key: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

- # provider is the name of the provider (Google Cloud Platform)
provider: gcp
# profile is the name of the provider profile
profile: logs
# gcp_service_account_key is the minified json of a google cloud service account with list permissions
gcp_service_account_key: '{xxxxxxxxxxxxx}'

Running cloudlist
CODE
▶ cloudlist

This will list all the assets from configured providers in the configuration file. Specific providers and asset type can also be specified using available flags.

CODE
▶ cloudlist -provider aws

________ _____ __
/ ____/ /___ __ ______/ / (_)____/ /_
/ / / / __ \/ / / / __ / / / ___/ __/
/ /___/ / /_/ / /_/ / /_/ / / (__ ) /_
\____/_/\____/\__,_/\__,_/_/_/____/\__/ v0.0.1

projectdiscovery.io

[WRN] Use with caution. You are responsible for your actions
[WRN] Developers assume no liability and are not responsible for any misuse or damage.
[INF] Listing assets from AWS (prod) provider.
abc.com
example.com
1.1.1.1
2.2.2.2
3.3.3.3
4.4.4.4
5.5.5.5
6.6.6.6
[INF] Found 2 hosts and 6 IPs from AWS service (prod)

Running cloudlist with Nuclei

Scanning assets from various cloud providers with nuclei for security assessments:-

CODE
▶ cloudlist -silent | httpx -silent | nuclei -t cves/

Supported providers
  • AWS (Amazon web services)
    • EC2
    • Route53
  • GCP (Google Cloud Platform)
    • Cloud DNS
  • DO (DigitalOcean)
    • Instances
  • SCW (Scaleway)
    • Instances

To see how to configure providers, check directly in your go programs. The following code snippets outline how to list assets from all or given cloud provider.

CODE
package main

import (
"context"
"log"

"github.com/projectdiscovery/cloudlist/pkg/inventory"
"github.com/projectdiscovery/cloudlist/pkg/schema"
)

func main() {
inventory, err := inventory.New(schema.Options{
schema.OptionBlock{"provider": "digitalocean", "digitalocean_token": "ec405badb974fd3d891c9223245f9ab5871c127fce9e632c8dc421edd46d7242"},
})
if err != nil {
log.Fatalf("%s\n", err)
}

for _, provider := range inventory.Providers {
resources, err := provider.Resources(context.Background())
if err != nil {
log.Fatalf("%s\n", err)
}
for _, resource := range resources.Items {
_ = resource // Do something with the resource
}
}
}

Acknowledgments

Thank you for inspiration


License

cloudlist is made with love by the


Vollständiges Original-Advisory
Ausführliche Details, Exploit-Analyse & Hersteller-Stellungnahme auf feedproxy.google.com.
↗ Original-Artikel auf feedproxy.google.com lesen
Wie bewertest du diesen Beitrag?
1 Klick Feedback
Teilen mit Netzwerk & Team:
Community Threat-Level Barometer
Live Votum

Wie stufst du das Risiko dieser Schwachstelle / Bedrohung für dein Unternehmen ein?

Noch keine Stimmen — schätze das Risiko als Erster ein.

Community-Analysen & Experten-Meinungen 0

Verfasse deine eigene Analyse, teile Workarounds oder diskutiere diesen Vorfall im Blog.
Noch keine Community-Analyse verfasst. Markiere einen Textabschnitt oder klicke oben auf Eigene Analyse verfassen“!
Community Pulse: Relevanz-Einschätzung
1 Klick Experten-Votum
🔴 Akute Relevanz 0%
🟡 In Evaluierung 0%
🟢 Keine Auswirkung 0%
Spannende Innovation 0%
Verwandte Story-Cluster & Quellen (Vektor-KI)
Port 8095 Engine
1 Quelle
Sennheiser Momentum True Wireless 5 earbuds review: Next-gen in every way
1 Quelle
Cyberattacks on Oil Tankers Put Maritime Critical Infrastructure at Risk
1 Quelle
OpenAI veröffentlicht neue KI-Zwischenfälle mit Schummelei und Hackerangriffen
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Cloudlist - A Tool For Listing Assets From Multiple Cloud Providers

Thematisch verwandte Begriffe: Cloudlist, Tool, Listing, Assets · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...