https://github.com/gosecure/scoutmerge
ScoutMerge is an extension for ScoutSuite allowing you to easily display results of hundreds of projects audits into a single text file.
https://github.com/gosecure/scoutmerge
Last synced: 6 months ago
JSON representation
ScoutMerge is an extension for ScoutSuite allowing you to easily display results of hundreds of projects audits into a single text file.
- Host: GitHub
- URL: https://github.com/gosecure/scoutmerge
- Owner: GoSecure
- License: gpl-2.0
- Created: 2024-08-14T18:55:50.000Z (almost 2 years ago)
- Default Branch: main
- Last Pushed: 2025-07-30T21:51:51.000Z (about 1 year ago)
- Last Synced: 2025-07-31T00:20:33.891Z (about 1 year ago)
- Language: Python
- Homepage:
- Size: 17.6 KB
- Stars: 2
- Watchers: 7
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# ScoutMerge
ScoutMerge is an extension for the cloud auditing tool ScoutSuite. When working with large cloud environments containing hundreds or even thousands of projects (GCP) or accounts (AWS), tools like ScoutSuite can struggle or break due to the overwhelming amount of data. ScoutMerge addresses this by allowing you to run the `scout` command on each project or account individually, then aggregates the results into a single text file that lists each affected project or account for each ScoutSuite finding, if any.
### Supported Cloud Providers
- AWS
- GCP
# Usage
**Requirements:** See ScoutSuite [wiki](https://github.com/nccgroup/ScoutSuite/wiki/Setup)
### AWS
1. Authenticate and run ScoutSuite for each AWS account in scope. Save all output in one main directory
2. Run the `aws.py` script with the the `-d` flag pointing to the main directory with the scoutsuite output. It is assumed that your directory structure is as follows:
```
> tree -L 1
scoutsuite_output_directory
├── fsociety-eu-pre
├── fsociety-us-prod
├── steel-mountain-us-pre
├── steel-mountain-us-prod
├── allsafe-us-pre
├── allsafe-eu-prod
├── dark-army-us-pre
├── dark-army-us-prod
├── ecorp-dev
└── ecorp-us-prod
```
### GCP
For GCP, the script takes a Folder ID as input, finds all projects in specified folder as well as subfolders, runs the `scout` command on each project found, then proceeds to aggregate the results into one text file.
1. Authenticate with `gcloud`
2. Do not set default project
3. Run `gcp.py` with the `-f` or `-g` flag for the Folder ID housing the projects in scope or to specify an `ids.txt` file (file housing specific project IDs)
4. You will also need to specify `--service-account ` or `--user-account` assuming you have already run `gcloud auth login`
## Feature Roadmap
☑ GCP
☑ AWS
☐ Azure