nccgroup / ScoutSuite

Multi-Cloud Security Auditing Tool
GNU General Public License v2.0
6.65k stars 1.06k forks source link

Resource Group based scanning ? #625

Closed c0d3xpl0it closed 4 years ago

c0d3xpl0it commented 4 years ago

Hello, I have to audit all resources in one Resource Group of azure belonging to particular project in one entire subscription. For this I got one user belonging to required Resource Group with reader privileges and tried running the tool, but no output is received after below steps.

(venv) root@kali:~/Tools/ScoutSuite# python scout.py azure --user-account 
2020-01-26 10:40:51 kali scout[3368] INFO Launching Scout
2020-01-26 10:40:51 kali scout[3368] INFO Authenticating to cloud provider
Username: vapt@hello.com
Password: 
2020-01-26 10:41:37 kali scout[3368] INFO No subscription set, inferring ID
2020-01-26 10:41:40 kali scout[3368] INFO Running against the 12345a-33ee-234q-rr44-345345ab0d4 subscription
2020-01-26 10:41:40 kali scout[3368] INFO Gathering data from APIs
2020-01-26 10:41:40 kali scout[3368] INFO Fetching resources for the Security Center service
2020-01-26 10:41:40 kali scout[3368] INFO Fetching resources for the SQL Database service
2020-01-26 10:41:40 kali scout[3368] INFO Fetching resources for the Storage Accounts service
2020-01-26 10:41:40 kali scout[3368] INFO Fetching resources for the Key Vault service
2020-01-26 10:41:40 kali scout[3368] INFO Fetching resources for the Graph RBAC service
2020-01-26 10:41:40 kali scout[3368] INFO Fetching resources for the Network service
2020-01-26 10:41:40 kali scout[3368] INFO Fetching resources for the Virtual Machines service

Any help ?

x4v13r64 commented 4 years ago

Scout scans a whole subscription, you cannot point it to a specific resource group.

but no output is received after below steps

Is this a separate issue?

c0d3xpl0it commented 4 years ago

No, I was running scout with user belonging to one particular resource group.(Not global reader user)