OffensiveCloudDistribution
Have you ever needed to scan 3 million hosts with masscan? What about running EyeWitness on 5k servers.. Without sacrificing accuracy, those things will take quite awhile! What if you could stand up 50 EC2 instances to each take a small part of the work, have each of the instances spit the results to an S3 Bucket, and then spin down the instances. All while staying in the Free AWS Tier. This Terraform module lets you do that!
What do I need to get started?
- An AWS or GCP account
- Terraform
Yes, thats it! The scripts contained here configure the EC2 instances, kick the actions off and throw the results into an S3 bucket for you.
Getting Started
AWS Instructions
- Download and install Terraform for your platform. https://www.vasos-koupparis.com/terraform-getting-started-install/
- Create an AWS account if you don't already have one.
- Retrieve the AWS access and secret keys
git clone https://github.com/jordanpotti/OffensiveCloudDistributioncd OffensiveCloudDistribution/aws_tfterraform initterraform apply; You will need to enter a couple values here such as how many instances, the host name, the IP you want to SSH into the instances with and a line delimited list of IP's to scan.- The results will give you the IP, as well as the Private SSH key. Copy this key into a
.pemfile to SSH into the servers. - The results of the scan (Or custom action specified by you) will end up in a randomly named S3 Bucket. Download the files placed there from the scan before you run
terraform destroysince this will destroy your S3 bucket as well.
For GCP instructions, check out the readme located in the gcp_tf directory
Note
To bypass the module asking for variables, simply add a terraform.tfvars file in the aws_tf or gcp_tf directory to add the values, eg:
secret_key = ""
access_key = ""
scan_list = ""
instance_count = ""
allow_ingress = ""
host_name = ""
Other Platforms
Currently, the Terraform module here is based on AWS and GCP, PR's are welcome :)
Disclaimer:
Please be aware of the AWS and GCP Free Tier rules. Using instances that qualify for the free tier, you can utilize 750 hours per month. By modifying certain pieces of the Terraform module (Like changing the instance size), and not destroying resources after your job is done, you will likely incur hefty charges.