Insecure Azure Cloud IP detection

[aquasecurity]

Insecure Azure Cloud IP detection

[lizrice]

That’s interesting. I guess we’d need to keep up-to-date with any changes to that file, but it might be more efficient to embed the data

[DrMurx]

The project which backs the azurespeed site contains the configuration used for the API call.

Check PublicIPs.xml, maybe it can be embedded into kube-hunter?

[RaitoBezarius]

@lizrice What about using Tor to query the service? Do we care about someone MITM'ing the connection and reading the data we send to the service? Or do we care about getting anonymity during querying the service?

I could send a PR enabling Tor support for external services queries, using SOCKS5 proxy (assumes Tor is running as a proxy, blabla)

[DrMurx]

@RaitoBezarius Using Tor for this particular purpose is probably like taking a sledgehammer to crack a nut. A locally running security scanner should not leak internal data to a 3rd party, regardless of the transport, especially if that 3rd party is not an officially supported tool of a known vendor.

[RaitoBezarius]

@DrMurx Well, I agree. I guess the simplest way is to embed the PublicIPs data into the tool directly.

[itaysk]

the source of truth is here: https://www.microsoft.com/en-us/download/confirmation.aspx?id=56519
This is a json file provided by MS and is updated weekly.

If we want to eliminate external dependencies, we could fetch this file on Kube-Hunter run and write some code that matches against the listed addresses.

[blrchen]

I am the owner of azurespeed.com, i have submitted a PR to replace insecure endpoint with secured endpoint. Appreciate if someone can help review and merge.