# Cloudlist | A Tool For Listing Assets From Multiple Cloud Providers **URL:** \ **Category:** Tools & Scripts\ **Tags:** tools, cloud-storage\ **Created:** [February 7, 2021, 1:22pm UTC](https://onehack.st/t/cloudlist-a-tool-for-listing-assets-from-multiple-cloud-providers/172078 "2021-02-07T13:22:33Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![TheStrength](https://onehack.st/user_avatar/onehack.st/thestrength/32/46753_2.png) [@TheStrength](https://onehack.st/u/TheStrength)\ **Post date:** [February 7, 2021, 1:22pm UTC](https://onehack.st/t/cloudlist-a-tool-for-listing-assets-from-multiple-cloud-providers/172078/1 "2021-02-07T13:22:33Z")
![image](https://onehack.st/uploads/default/original/3X/0/2/02c646ca2ac7878b44bf15220ac8447b69f2f7f6.png) Cloudlist is a multi-cloud tool for getting Assets (Hostnames, IP Addresses) from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a centralized list of assets across multiple clouds with very little configuration efforts. **Features** - Easily list Cloud assets with multiple configurations. - Multiple cloud providers support. - Highly extensible making adding new providers a breeze. - **STDOUT** support to work with other tools in pipelines. **Usage** ```auto cloudlist -h ``` This will display help for the tool. Here are all the switches it supports. | Flag | Description | Example | | --- | --- | --- | | config | Config file for providers | cloudlist -config test.yaml | | provider | List assets of given providers | cloudlist -provider aws | | host | List hosts only | cloudlist -host | | ip | List Ips only | cloudlist -ip | | json | List output in the JOSN format | cloudlist -json | | output | Store the output in file | cloudlist -output | | silent | Display results only | cloudlist -silent | | version | Display current version | cloudlist -version | | verbose | Display verbose mode | cloudlist -verbose | **Installation Instructions** **From Source** The installation is easy. You can download the pre-built binaries for your platform from the [Releases](https://github.com/projectdiscovery/cloudlist/releases/) page. Extract them using tar, move it to your `$PATH`and you’re ready to go. ```auto Download latest binary from https://github.com/projectdiscovery/cloudlist/releases tar -xvf cloudlist-linux-amd64.tar mv cloudlist-linux-amd64 /usr/local/bin/cloudlist cloudlist -h ``` **From Source** **cloudlist** requires **go1.14+** to install successfully. Run the following command to get the repo – ```auto GO111MODULE=on go get -v github.com/projectdiscovery/cloudlist/cmd/cloudlist ``` **From Github** ```auto git clone https://github.com/projectdiscovery/cloudlist.git; cd cloudlist/cmd/cloudlist; go build; cp cloudlist /usr/local/bin/; cloudlist -version ``` **Configuration file** The default config file should be located in `$HOME/.config/cloudlist/config.yaml` and has the following contents as an example. In order to run this tool, the keys need to updated in the config file. ```auto # Configuration file for cloudlist enumeration agent- # provider is the name of the provider (Digitalocean) provider: do # profile is the name of the provider profile profile: xxxx # digitalocean_token is the API key for digitalocean cloud platform digitalocean_token: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx- # provider is the name of the provider (Scaleway) provider: scw # scaleway_access_key is the access key for scaleway API scaleway_access_key: SCWXXXXXXXXXXXXXX # scaleway_access_token is the access token for scaleway API scaleway_access_token: xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxx- # provider is the name of the provider (Amazon Web Services) provider: aws # pro file is the name of the provider profile profile: staging # aws_access_key is the access key for AWS account aws_access_key: AKIAXXXXXXXXXXXXXX # aws_secret_key is the secret key for AWS account aws_secret_key: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx- # provider is the name of the provider (Google Cloud Platform) provider: gcp # profile is the name of the provider profile profile: logs # gcp_service_account_key is the minified json of a google cloud service account with list permissions gcp_service_account_key: '{xxxxxxxxxxxxx}' ``` **Running cloudlist** ```auto cloudlist ``` This will list all the assets from configured providers in the configuration file. Specific providers and asset type can also be specified using available flags. ```auto cloudlist -provider aws _____________ __/____ / / _____ ______/ / (_)____/ /_ / / / / __/ / / /__ / / / ___/__ // /___/ / /_/ / /_/ / /_/ / / (__ ) /_ ____/_/____ / __,_/__ ,_/_/_/ ____/__ / v0.0.1 projectdiscovery.io[WRN] Use with caution. You are responsible for your actions[WRN] Developers assume no liability and are not responsible for any misuse or damage.[INF] Listing assets from AWS (prod) provider.abc.comexample.com1.1.1.12.2.2.23.3.3.34.4.4.45.5.5.56.6.6.6[INF] Found 2 hosts and 6 IPs from AWS service (prod) ``` **Running cloudlist with Nuclei** Scanning assets from various cloud providers with nuclei for security assessments:- ```auto cloudlist -silent | httpx -silent | nuclei -t cves/ ``` **Supported providers** - AWS (Amazon web services) - EC2 - Route53 - GCP (Google Cloud Platform) - Cloud DNS - DO (DigitalOcean) - Instances - SCW (Scaleway) - Instances To see how to configure providers, check [PROVIDERS.md](https://github.com/projectdiscovery/cloudlist/blob/main/PROVIDERS.md). **Todo** - Add support for Azure platform **Cloudlist as a library** It’s possible to use the library directly in your go programs. The following code snippets outline how to list assets from all or given cloud provider. ```auto package mainimport ( "context" "log" "github.com/projectdiscovery/cloudlist/pkg/inventory" "github.com/projectdiscovery/cloudlist/pkg/schema")func main() { inventory, err := inventory.New(schema.Options{ schema.OptionBlock{"provider": "digitalocean", "digitalocean_token": "ec405badb974fd3d891c9223245f9ab5871c127fce9e632c8dc421edd46d7242"}, }) if err != nil { log.Fatalf("%sn", err) } for _, provider := range inventory.Providers { resources, err := provider.Resources(context.Background()) if err != nil { log.Fatalf("%sn", err) } for _, resource := range resources.Items { _ = resource // Do something with the resource } }} ``` **Acknowledgments** Thank you for inspiration - [Smogcloud](https://github.com/BishopFox/smogcloud) - [Cloudmapper](https://github.com/duo-labs/cloudmapper) **License** cloudlist is made with love by the [projectdiscovery](https://projectdiscovery.io/) team and licensed under [MIT](https://github.com/projectdiscovery/proxify/blob/master/LICENSE.MD) ## GitHub: > **[GitHub - projectdiscovery/cloudlist: Cloudlist is a tool for listing Assets from...](https://github.com/projectdiscovery/cloudlist)** > > Cloudlist is a tool for listing Assets from multiple Cloud Providers.