cloud_metadata_extractor

Cloud metadata extraction tools and scripts.

Research

This repo is the result of research for a BSides San Antonio 2019 presentation. Click the link for the slides (included in this repo):

There's no place like 169.254.169.254 - Ab(using) cloud metadata URLs

Installation

Scripts are written for Python 3.6+. Clone the git repository and install the requirements.

git clone https://github.com/opsdisk/cloud_metadata_extractor.git
cd cloud_metadata_extractor
virtualenv -p python3 .venv  # If using a virtual environment.
source .venv/bin/activate  # If using a virtual environment.
pip3 install -r requirements.txt

Neutered cloud_metadata_extractor.py script

Because I am still working with some organizations affected, some functions and functionality have been replaced with:

print("Functionality will be released after responsbile disclosure period expires.")

Collect Target IPs

Amazon AWS

python cloud_metadata_extractor.py -p aws -r

Microsoft Azure

python cloud_metadata_extractor.py -p azure -r

Digital Ocean

• Copy/pasted from https://ipinfo.io/AS14061
• Command line fu to extract