domains / families / security / enumerating-cloud-with-cloudfox

enumerating-cloud-with-cloudfox

separate

Run CloudFox's read-only Describe/List/Get enumeration (all-checks,

When to use

• Establishing situational awareness immediately after compromising a cloud credential
• Quickly identifying internet-exposed endpoints, instances, and exposed secrets
• Mapping `sts:AssumeRole` trust relationships to plan lateral movement / privesc
• Triaging an unfamiliar AWS or Azure account during an authorized assessment
• Producing attacker-centric inventory artifacts that complement a defensive audit

When not to use

• Defender-style configuration audit
• Unauthorized cloud penetration testing
• Testing accounts without signed authorization

Skill page

Source