Connect

Cloud & SaaS Exposure Discovery

elementalsoulsbyelementalsouls
•
3.0k
•
Security & Testing

Discovers exposed cloud storage buckets, decodes leaked AWS account IDs offline, and identifies supply-chain attack surfaces.

Cloud & SaaS Exposure equips Claude Code with enterprise-grade reconnaissance tradecraft to identify exposed cloud and supply-chain assets during authorized security assessments. It systematically discovers S3, GCS, and Azure Blob storage through observed-name mining and bounded permutations, enforces an ownership-gated severity model to eliminate false-positive criticals, executes fully offline AWS account-ID extraction from leaked access keys using base32 decoding, confirms npm and PyPI dependency-confusion vectors without sending target packets, and performs passive cloud-native and Kubernetes control-plane fingerprinting for attribution and exposure triage.

Key Features

01Identify dangling CNAME bucket takeovers and classify object keys into 9 value tiers
02Decode AWS account IDs completely offline from leaked AKIA, ASIA, and AROA access keys
03Detect npm and PyPI dependency-confusion risks with safe, read-only public registry checks
04Enumerate S3, GCS, and Azure Blob buckets using observed names and bounded two-class permutations
052,955 GitHub stars
06Fingerprint cloud-native architectures including Kubernetes, Lambda, Cloud Run, and CI panels passively

Use Cases

01Validating internal package dependencies against public registries to prevent supply-chain dependency-confusion attacks
02Mapping an organization's public cloud storage footprint and triaging exposed object keys without retrieving file contents
03Recovering the parent AWS account ID from a leaked credential during red-team reconnaissance to map cross-account trust