https://github.com/jhaddix/awsScrape

A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.
https://github.com/jhaddix/awsScrape

Last synced: 22 days ago
JSON representation

A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.

• Host: GitHub
• URL: https://github.com/jhaddix/awsScrape
• Owner: jhaddix
• Created: 2023-03-18T07:24:23.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2024-01-10T22:54:54.000Z (11 months ago)
• Last Synced: 2024-11-09T19:50:21.506Z (about 1 month ago)
• Language: Go
• Size: 26.4 KB
• Stars: 225
• Watchers: 6
• Forks: 29
• Open Issues: 2
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - jhaddix/awsScrape - A tool to scrape the AWS ranges looking for a keyword in SSL certificate data. (Go)

README

        
# AWSScrape

AWSScrape is a tool designed to scrape SSL certificates from all AWS IP ranges, searching for specific keywords in the certificates' Common Name (CN), Organization (O), and Organizational Unit (OU) fields.

[![Twitter](https://img.shields.io/badge/[email protected])](https://twitter.com/jhaddix)

## Installation

1. Clone this repository:

```

git clone https://github.com/jhaddix/awsscrape.git

cd awsscrape

```

## Usage

Run the script as follows:

```

go run awsscrape.go -keyword=  

```

| Argument   | Description                                                                                                  |

|------------|--------------------------------------------------------------------------------------------------------------|

| -keyword    | Provide a single keyword to search for in SSL certificates |

| -output | Provide an output file to store results within |

| -randomize | When set, randomize the order in which IP addresses are checked |

| -threads | Specify the number of concurrent threads (default 4) |

| -timeout | Specify the number of seconds to timeout an SSL connection (default 1) |

| -v -verbose | Enable verbose mode |

| -w -wordlist | Specify a file of keywords to check for (on newlines) |

The script will parse the SSL certificates from the AWS IP ranges and display any matching your KEYWORD with the IP addresses of the matching certificates.

Please note that iterating through all AWS IP addresses and checking SSL certificates WILL take a long time to complete.

=================================================================================================================================================

Disclaimer: Usage without a customers permission may constitute a violation of AWS AUP:

* https://aws.amazon.com/security/penetration-testing/

* https://aws.amazon.com/aup/

Use Responsibly