# CloudPulse | AWS Cloud Landscape Search Engine

**URL:** <https://onehack.st/t/cloudpulse-aws-cloud-landscape-search-engine/262525>\
**Category:** Tools & Scripts\
**Tags:** seo, tools, freebies, hosting\
**Created:** [November 3, 2023, 10:21pm UTC](https://onehack.st/t/cloudpulse-aws-cloud-landscape-search-engine/262525 "2023-11-03T22:21:33Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![PlayBoy83](https://onehack.st/user_avatar/onehack.st/playboy83/32/164314_2.png) [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Post date:** [November 3, 2023, 10:21pm UTC](https://onehack.st/t/cloudpulse-aws-cloud-landscape-search-engine/262525/1 "2023-11-03T22:21:34Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/9/e/9e13fa3e14ecb3c945a1239ff460b37604b0a6e8.png)

# [CloudPulse - AWS Cloud Landscape Search Engine](https://github.com/yousseflahouifi/CloudPulse/#cloudpulse---aws-cloud-landscape-search-engine)

During the reconnaissance phase, an attacker searches for any information about his target to create a profile that will later help him to identify possible ways to get in an organization.  
CloudPulse is a powerful tool that simplifies and enhances the analysis of SSL certificate data. It leverages the extensive repository of SSL certificates obtained from the AWS EC2 machines available at [Trickest Cloud](https://github.com/trickest/cloud). With CloudPulse , security researchers can efficiently explore SSL certificate details, uncover potential vulnerabilities, and gather valuable insights for a variety of security-related tasks.

# [Architecture and how it works](https://github.com/yousseflahouifi/CloudPulse/#architecture-and-how-it-works)

[![cloudpulse](https://github.com/yousseflahouifi/CloudPulse/raw/main/cp.png)](https://github.com/yousseflahouifi/CloudPulse/blob/main/cp.png)

# [How can it benefit you](https://github.com/yousseflahouifi/CloudPulse/#how-can-it-benefit-you)

Simplifies security assessments with a user-friendly interface. It allows you to effortlessly find company’s asset’s on aws cloud:

- IPs
- subdomains
- domains associated with a target
- organization name
- discover origin ips

# [🛠 Installation](https://github.com/yousseflahouifi/CloudPulse/#%EF%B8%8F-installation)

### [Method 1 :](https://github.com/yousseflahouifi/CloudPulse/#method-1-)

1- Download CloudPulse :

```auto
git clone https://github.com/yousseflahouifi/CloudPulse
cd CloudPulse/

```

2- Run docker compose :

```auto
docker-compose up -d

```

3- Run script.py script

```auto
docker-compose exec web python script.py

```

4 - Now go to http://:8000/search and enjoy the search engine

### [Method 2 :](https://github.com/yousseflahouifi/CloudPulse/#method-2-)

1- download CloudPulse :

```auto
git clone https://github.com/yousseflahouifi/CloudPulse
cd CloudPulse/

```

2- Setup virtual environment :

```auto
python3 -m venv myenv
source myenv/bin/activate

```

3- Install requirements.txt file :

```auto
pip install -r requirements.txt

```

4- run an instance of elasticsearch using docker :

```auto
docker run -d --name elasticsearch -p 9200:9200 -e "discovery.type=single-node" elasticsearch:6.6.1

```

5- update script.py and settings file to the host ‘localhost’:

```auto
#script.py
es = Elasticsearch([{'host': 'localhost', 'port': 9200}])

```

```auto
#se/settings.py

ELASTICSEARCH_DSL = {
    'default': {
        'hosts': 'localhost:9200'
    },
}

```

6- Run script.py to index data in elasticsearch:

```auto
python script.py

```

7- Run the app:

```auto
python manage.py runserver 0:8000

```

# [⚠ Important notes](https://github.com/yousseflahouifi/CloudPulse/#%EF%B8%8F-important-notes)

Included in the CloudPulse repository is a sample data.csv file containing close to 4,000 records, which provides a glimpse of the tool’s capabilities. For the full dataset, visit the [Trickest Cloud](https://github.com/trickest/cloud) repository clone the data and update data.csv file (it contains close to 9 millions data)

# [Example :](https://github.com/yousseflahouifi/CloudPulse/#example-)

as an example searching for .mil data gives:  
[![.mil data](https://github.com/yousseflahouifi/CloudPulse/raw/main/cloudpulse.jpg)](https://github.com/yousseflahouifi/CloudPulse/blob/main/cloudpulse.jpg)

searching for tesla as en example gives :

[![tesla demo](https://github.com/yousseflahouifi/CloudPulse/raw/main/teslademo.png)](https://github.com/yousseflahouifi/CloudPulse/blob/main/teslademo.png)

# [Limitations :](https://github.com/yousseflahouifi/CloudPulse/#limitations-)

CloudPulse heavily depends on the data.csv file, which is a sample dataset extracted from the larger collection maintained by Trickest. While the sample dataset provides valuable insights, the tool’s full potential is realized when used in conjunction with the complete dataset, which is accessible in the Trickest repository [here](https://github.com/trickest/cloud).  
Users are encouraged to refer to the Trickest dataset for a more comprehensive and up-to-date analysis.

# [References:](https://github.com/yousseflahouifi/CloudPulse/#references)

- [Scan aws ip ssl certificates](https://www.daehee.com/scan-aws-ip-ssl-certificates/)
- [Trickest cloud dataset](https://github.com/trickest/cloud)
- [cloud provider infrastructure mapping](https://trickest.com/blog/cloud-provider-infrastructure-mapping/)
- [Sam Erb - Hunting Certificates and Servers - DEF CON 27 Packet Hacking Village](https://www.youtube.com/watch?v=1pqCqz3JzXE)

## GitHub:

> **[GitHub - yousseflahouifi/CloudPulse: AWS Cloud Landscape Search Engine](https://github.com/yousseflahouifi/CloudPulse/)**
>
> AWS Cloud Landscape Search Engine