66 lines
1.3 KiB
YAML
66 lines
1.3 KiB
YAML
id: azure-vm-cloud-enum
|
|
|
|
info:
|
|
name: Azure Virtual Machines - Cloud Enumeration
|
|
author: initstring
|
|
severity: info
|
|
description: |
|
|
Searches for Azure virtual machines via their registered DNS names.
|
|
metadata:
|
|
verified: true
|
|
max-request: 1
|
|
tags: cloud,cloud-enum,azure,fuzz,enum,dns
|
|
|
|
self-contained: true
|
|
|
|
variables:
|
|
BaseDNS: "cloudapp.azure.com"
|
|
regionname:
|
|
- eastasia
|
|
- southeastasia
|
|
- centralus
|
|
- eastus
|
|
- eastus2
|
|
- westus
|
|
- northcentralus
|
|
- southcentralus
|
|
- northeurope
|
|
- westeurope
|
|
- japanwest
|
|
- japaneast
|
|
- brazilsouth
|
|
- australiaeast
|
|
- australiasoutheast
|
|
- southindia
|
|
- centralindia
|
|
- westindia
|
|
- canadacentral
|
|
- canadaeast
|
|
- uksouth
|
|
- ukwest
|
|
- westcentralus
|
|
- westus2
|
|
- koreacentral
|
|
- koreasouth
|
|
- francecentral
|
|
- francesouth
|
|
- australiacentral
|
|
- australiacentral2
|
|
- southafricanorth
|
|
- southafricawest
|
|
|
|
dns:
|
|
- name: "{{wordlist}}.{{regionname}}.{{BaseDNS}}"
|
|
type: A
|
|
class: inet
|
|
|
|
recursion: true
|
|
|
|
attack: batteringram
|
|
|
|
matchers:
|
|
- type: word
|
|
part: answer
|
|
words:
|
|
- "IN\tA"
|
|
# digest: 4a0a0047304502210098b015215646fc57a33bf05ec1cd3363b21d9f635738f80193fab1edb1eb41c5022029c97c1df1d99734a1b67093023f2540fc877695c84573d61d3072c6167572ab:922c64590222798bb761d5b6d8e72950 |