Skip to content

Using ScoutSuite

SethBodine edited this page May 28, 2024 · 10 revisions

Prepare the environment

Python Virtual Environment has been set up - this contains python requirements

Updates

Scoutsuite is updated at container image start-up

Prepare the environment

cd /opt/ScoutSuite/                 # Execution path
. scoutsuite.sh                     # activate the venv environment

AWS

Profile

./scout.py aws --profile [AWS Profile Name] 

Access Key as args

./scout.py aws --profile [AWS Profile Name] --access-key-id [AWS_ACCESS_KEY_ID] --secret-access-key [AWS_SECRET_ACCESS_KEY] --session-token [AWS_SESSION_TOKEN]

Azure

Leverage pre-existing auth against all subscriptions

This aproach works best if admin approval for auth is required, it will bypass any access issues and complete the report (with errors)

./scout.py azure -c --all-subscriptions

Authenticate at run-time

./scout.py azure --user-account-browser --tenant [Azure AD Tenant ID] 

GCP

./scout.py gcp -u

Additional Information