66 lines
1.3 KiB
YAML
66 lines
1.3 KiB
YAML
id: azure-vm-cloud-enum
|
|
|
|
info:
|
|
name: Azure Virtual Machines - Cloud Enumeration
|
|
author: initstring
|
|
severity: info
|
|
description: |
|
|
Searches for Azure virtual machines via their registered DNS names.
|
|
metadata:
|
|
verified: true
|
|
max-request: 1
|
|
tags: cloud,cloud-enum,azure,fuzz,enum
|
|
|
|
self-contained: true
|
|
|
|
variables:
|
|
BaseDNS: "cloudapp.azure.com"
|
|
regionname:
|
|
- eastasia
|
|
- southeastasia
|
|
- centralus
|
|
- eastus
|
|
- eastus2
|
|
- westus
|
|
- northcentralus
|
|
- southcentralus
|
|
- northeurope
|
|
- westeurope
|
|
- japanwest
|
|
- japaneast
|
|
- brazilsouth
|
|
- australiaeast
|
|
- australiasoutheast
|
|
- southindia
|
|
- centralindia
|
|
- westindia
|
|
- canadacentral
|
|
- canadaeast
|
|
- uksouth
|
|
- ukwest
|
|
- westcentralus
|
|
- westus2
|
|
- koreacentral
|
|
- koreasouth
|
|
- francecentral
|
|
- francesouth
|
|
- australiacentral
|
|
- australiacentral2
|
|
- southafricanorth
|
|
- southafricawest
|
|
|
|
dns:
|
|
- name: "{{wordlist}}.{{regionname}}.{{BaseDNS}}"
|
|
type: A
|
|
class: inet
|
|
|
|
recursion: true
|
|
|
|
attack: batteringram
|
|
|
|
matchers:
|
|
- type: word
|
|
part: answer
|
|
words:
|
|
- "IN\tA"
|
|
# digest: 4b0a00483046022100ca35091af3c788dd28bff2c05deea8c6a4f4a3fc1633aaf775571d1999af5226022100c83bfa24cad2599f365a3166bb47b51b9ef86eb83dc9295b19cc66cc0dd13d63:922c64590222798bb761d5b6d8e72950 |