Cloud Asset Discovery Tool

Cloud Asset Discovery

Cloud asset discovery for organizations across major cloud providers:

• S3 Bucket Enumeration — Tests common naming patterns (company-backup, company-dev, company-prod, company-assets) across AWS regions with permutation-based wordlist generation.
• Azure Blob Storage — Enumerates storage accounts and containers using the blob.core.windows.net namespace with similar naming pattern detection.
• GCP Storage — Tests Google Cloud Storage buckets at storage.googleapis.com with project-based naming conventions.
• Subdomain Correlation — Cross-references discovered subdomains with cloud provider IP ranges to identify cloud-hosted services and their specific provider/region.
• Permission Testing — Tests discovered storage resources for public read, write, and list permissions. Identifies misconfigured buckets with anonymous access enabled.
• Service Enumeration — Discovers exposed cloud services: EC2 instances, Azure VMs, Lambda functions, API Gateways, CloudFront distributions mapped to the target domain.