Skip to content
Cloud metadata extraction tools and scripts
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
README.md
abusing_cloud_metadata_urls-bsides_satx_2019.pdf
cloud_metadata_extractor.py
requirements.txt
user_agents.txt

README.md

cloud_metadata_extractor

Cloud metadata extraction tools and scripts.

Research

This repo is the result of research for a BSides San Antonio 2019 presentation. Click the link for the slides (included in this repo):

There's no place like 169.254.169.254 - Ab(using) cloud metadata URLs

Installation

Scripts are written for Python 3.6+. Clone the git repository and install the requirements.

git clone https://github.com/opsdisk/cloud_metadata_extractor.git
cd cloud_metadata_extractor
virtualenv -p python3 .venv  # If using a virtual environment.
source .venv/bin/activate  # If using a virtual environment.
pip3 install -r requirements.txt

Neutered cloud_metadata_extractor.py script

Because I am still working with some organizations affected, some functions and functionality have been replaced with:

print("Functionality will be released after responsbile disclosure period expires.")

Collect Target IPs

Amazon AWS

python cloud_metadata_extractor.py -p aws -r

Microsoft Azure

python cloud_metadata_extractor.py -p azure -r

Digital Ocean

You can’t perform that action at this time.