66 lines
1.3 KiB
YAML
66 lines
1.3 KiB
YAML
id: azure-vm-cloud-enum
|
|
|
|
info:
|
|
name: Azure Virtual Machines - Cloud Enumeration
|
|
author: initstring
|
|
severity: info
|
|
description: |
|
|
Searches for Azure virtual machines via their registered DNS names.
|
|
metadata:
|
|
verified: true
|
|
max-request: 1
|
|
tags: cloud,cloud-enum,azure
|
|
|
|
self-contained: true
|
|
|
|
variables:
|
|
BaseDNS: "cloudapp.azure.com"
|
|
regionname:
|
|
- eastasia
|
|
- southeastasia
|
|
- centralus
|
|
- eastus
|
|
- eastus2
|
|
- westus
|
|
- northcentralus
|
|
- southcentralus
|
|
- northeurope
|
|
- westeurope
|
|
- japanwest
|
|
- japaneast
|
|
- brazilsouth
|
|
- australiaeast
|
|
- australiasoutheast
|
|
- southindia
|
|
- centralindia
|
|
- westindia
|
|
- canadacentral
|
|
- canadaeast
|
|
- uksouth
|
|
- ukwest
|
|
- westcentralus
|
|
- westus2
|
|
- koreacentral
|
|
- koreasouth
|
|
- francecentral
|
|
- francesouth
|
|
- australiacentral
|
|
- australiacentral2
|
|
- southafricanorth
|
|
- southafricawest
|
|
|
|
dns:
|
|
- name: "{{wordlist}}.{{regionname}}.{{BaseDNS}}"
|
|
type: A
|
|
class: inet
|
|
|
|
recursion: true
|
|
|
|
attack: batteringram
|
|
|
|
matchers:
|
|
- type: word
|
|
part: answer
|
|
words:
|
|
- "IN\tA"
|
|
# digest: 4b0a004830460221008d223bfdb3585e335e8282ca206945a6f7704dab4a2899d3410229bf0db7132d022100b9de9af2b393a559575b67a5b25b6334fe8cddd1ceed5059ee634dc3b0292d50:922c64590222798bb761d5b6d8e72950 |