We are excited to announce the release of a new version of our open-source, multi-cloud auditing tool ScoutSuite (on Github)!
This version includes multiple bug fixes, dependency updates and feature enhancements for AWS, Azure and GCP. It also adds and updates several rules for these three cloud providers, alongside improved finding templates and descriptions.
The most significant changes are:
- Core
- Updated dependencies
- Updated cli parser
- AWS
- Multiple bug fixes and minor improvements
- Updated IP ranges
- Updated rules for CloudFront
- Updated rules for EC2
- Updated rules for ELB
- Updated rules for IAM
- Updated rule for S3
- Updated rule for SQS
- Updated error logging and exception handling
- Improved secrets detection rules
- Added a new command flag that allows to run Scout on CN regions
- Azure
- Upgraded authentication strategies to use latest Azure SDK packages
- Multiple bug fixes and minor improvements
- Added new rules for Azure AD
- Added and updated rules for Azure Storage Account
- Added and updated rules for Networking
- Updated rule for Virtual Machines
- Added new rules for RBAC
- Added and updated rules for Azure SQL Databases, MySQL and PostgreSQL
- Added new rules for Logging and Monitoring
- Added and updated rules for Azure Security Center (now Defender for Cloud)
- Added and updated rules for AppService
- Added new rule for KeyVault
- Updated multiple finding templates
- GCP
- Multiple bug fixes and minor improvements
- Added new rules for GKE
- Added and updated rules for CloudSQL
- Added new rules for BigQuery
- Added new rules for Functions
- Added new rule for CloudStorage
- Updated rule for MemoryStore
- Updated multiple finding templates
- Updated UI
- Docker
- Fixed error in docker_compose.yaml
Check out the Github page and the Wiki documentation for more information about ScoutSuite.
For those wanting a Software-as-a-Service version, we also offer NCC Scout. This service includes persistent monitoring, as well as coverage of additional services across the three major public cloud platforms. If you would like to hear more, reach out to scout@nccgroup.com or visit our cyberstore!
We would like to express our gratitude thank all our contributors:
@xnkevinnguyen
@x4v13r64
@SophieDorval
@rscottbailey
@yash-seclogic
@charlietran
@tkmru
@Anthirian
