Offensive Tools
CloudFox: Find exploitable attack paths in cloud infrastructure.
CloudFox is a command line tool created to help penetration testers and other offensive security professionals find exploitable attack paths in cloud infrastructure. It currently supports AWS.
About CloudFox
A collection of enumeration commands that illuminate attack paths for cloud penetration testing.
The main inspiration for cloudfox was to create something like PowerView for cloud infrastructure. A collection of enumeration commands that illuminate attack paths even for those relatively new to cloud penetration testing. To do this, we codified our many sed/awk/grep/jq incantations into a tool that is portable, modular, and quick. Our primary audience is penetration testers, but we think cloudfox will be useful for all cloud security practitioners. CloudFox currently supports AWS.
With CloudFox, security practitioners can:
- Gain situational awareness in unfamiliar cloud environments
- Automate the laborious parts of cloud penetration testing
- Identify more exploitable attack paths in less time
Lead Researchers
Seth Art & Carlos Vendramini
Seth Art (OSCP) is a Principal Security Consultant at Bishop Fox, where he currently focuses on penetration testing cloud environments, Kubernetes clusters, and traditional internal networks.Seth is the author of multiple open-source projects including IAM Vulnerable, Bad Pods, celeryStalk, and PyCodeInjection, has presented at security conferences, including DerbyCon and BSidesDC, published multiple CVEs, and is the founder of IthacaSec, a security meetup in upstate NY.
Carlos Vendramini (OSCP, GPEN, GWAPT) is a Senior Security Consultant at Bishop Fox, where he focuses on penetration testing cloud environments, kubernetes clusters, and web applications. Carlos holds a bachelor’s degree in Computer Engineering from Federal University of Espirito Santo. Prior to Bishop Fox, Carlos worked for Fortune 500 companies in the financial and insurance sectors where he gained experience with penetration testing, vulnerability assessments, red teaming, and social engineering. In addition to penetration testing, Carlos enjoys discovering how SDKs and APIs for popular technologies operate and writing code to automate security tasks.
CloudFox Research
Check out these related resources on CloudFox.
Tool Talks: CloudFox
CyberRisk Alliance Cloud Adoption Security Report
Feb 24, 2022
Cloud 9: Top Cloud Penetration Testing Tools
By Britt Kemp
Sep 23, 2021
IAM Vulnerable - Assessing the AWS Assessment Tools
By Seth Art
Sep 09, 2021
IAM Vulnerable - An AWS IAM Privilege Escalation Playground
By Seth Art
Jun 07, 2022
Using CloudTrail to Pivot to AWS Accounts
By Gerben Kleijn