CloudBrute

Amazon, Google, Microsoft, DigitalOcean, Alibaba, Vultr, and Linode are a few of the major cloud service providers. A powerful tool for identifying a company's (target) infrastructure, data, and software on these platforms is called CloudBrute. This tool is helpful for bug bounty hunters, red teams, and penetration testers who are trying to identify and assess cloud-based vulnerabilities.

CloudBrute is a robust tool created to locate a company's target infrastructure, files, and applications on leading cloud service providers, including Amazon, Google, Microsoft, DigitalOcean, Alibaba, Vultr, and Linode. This tool proves invaluable for bug bounty hunters, red teamers, and penetration testers aiming to discover and evaluate vulnerabilities in cloud-based systems.

Features

  • Cloud     detection using IPINFO API and source code analysis.
  • Supports     all major cloud providers.
  • Black-Box     (unauthenticated) scanning.
  • Fast     and concurrent execution.
  • Modular     and easily customizable.
  • Cross-platform     compatibility (Windows, Linux, Mac).
  • User-Agent     randomization for bypassing restrictions.
  • Proxy     randomization (HTTP, Socks5).
  • Supports     Microsoft, Amazon, Google, DigitalOcean, Vultr, Linode, and Alibaba cloud     providers.

Install

 

Usage

Run the tool with the following command:

 

Note: If a cloud provider is not detected or you want toforce searching on a specific provider, use the -c option.

 

Demo

FullDemo

Table of Contents: