Performing recon in the cloud
As organizations start to make use of cloud services, it’s a no-brainer that cloud platforms should be on your list of targets when performing reconnaissance. When you perform reconnaissance on cloud targets, the approach would be the same as we have covered in the rest of the sections of this chapter. You would still need to perform passive and active information gathering on a cloud target, irrespective of the vendor. At the end of the day, if a cloud service is exposed to the internet, you can enumerate information from it.
When it comes to specialized tools that focus purely on cloud environments, there are a few that can be found on the internet. Let’s focus on some of them; we’ll begin with one that looks at GitHub for any sensitive data: Gitleaks.
Gitleaks
As organizations work with code repositories, GitHub and many others are often selected. Focusing on GitHub, Gitleaks serves as a tool to detect hardcoded secrets...
