[addtool] Smogcloud

[gwen001]

[homepage]https://github.com/BishopFox/smogcloud[/homepage] [tags]aws,cloud,buckets,cloudfront[/tags] [short_descr]Find cloud assets that no one wants exposed.[/short_descr] [long_descr]Find exposed AWS cloud assets that you did not know you had. A comprehensive asset inventory is step one to any capable security program. We made smogcloud to enable security engineers, penetration testers, and AWS administrators to monitor the collective changes that create dynamic and ephemeral internet-facing assets on a more frequent basis. May be useful to identify:

• Internet-facing FQDNs and IPs across one or hundreds of AWS accounts
• Misconfigurations or vulnerabilities
• Assets that are no longer in use
• Services not currently monitored
• Shadow IT

Supported services for extracting internet exposures:

• API Gateway
• CloudFront
• EC2
• Elastic Kubernetes Service
• Elastic Beanstalk
• Elastic Search
• Elastic Load Balancing
• IoT
• Lightsail
• MediaStore
• Relational Database Service
• Redshift
• Route53
• S3[/long_descr] [image]https://raw.githubusercontent.com/gwen001/offsectools_www/main/fa93d0bfc8a1d7b2155975ddd88cecb8.png[/image]

[gwen001]

Issue correctly handled, tool is waiting for human validation.

[gwen001]

Tool has been accepted by the team: https://offsec.tools/tool/smogcloud

Thank you for your contribution!