fsecurelabs/azurite

Enumeration and reconnaissance activities in the Microsoft Azure Cloud.

azurite's Issues

Contemporary CORS policy blocks the visualizer

I am not sure if there is a change that can be made to the HTML, but in FireFox, you can edit

privacy.file_unique_origin

to False and it will run.

Scanning/Enumerating Resource Groups out of scope of targeted subscription

Hey there! I've been testing out your Azurite tool and love it so far! Great work! I have been seeing an issue though. If you have some time I'd love for you to look into this.

The issue has to do with the scanning of resource groups in a subscription. It look like Azurite is scanning resource groups that are not in the scope of the subscription that I've specified. I can provide screenshots if needed (prefer not to in this public forum)

TypeError from AzuriteVisualizer.py

The PS portion seems to run fine and produces the JSON output as expected. The subscription JSON file seems to be properly formatted. When running the Visualizer against the subscription JSON file produces this.

Traceback (most recent call last):
File "AzuriteVisualizer.py", line 479, in
main()
File "AzuriteVisualizer.py", line 476, in main
parseJson()
File "AzuriteVisualizer.py", line 51, in parseJson
vnetNode['label'] = vnet['vnetName']
TypeError: string indices must be integers

Enhancement : VMSS & VNET Peering

When testing the tool on my lab environment, I noticed Azurite misses some things ;

• Virtual Machine Scale Sets are not detected
• VNET Peering is not detected (new feature in preview)

Issue running python AzuriteVisualizer.py

Running the Visualizer against the vm JSON I get:
[*] Parsing data...
Traceback (most recent call last):
File "AzuriteVisualizer.py", line 483, in
main()
File "AzuriteVisualizer.py", line 480, in main
parseJson()
File "AzuriteVisualizer.py", line 43, in parseJson
for vnet in data['subscriptionVNETs']:
TypeError: list indices must be integers, not str

Running against the subscription JSON I get:

Version: 0.6 Beta
Author: Apostolos Mastoris (@Lgrec0)
Email: apostolis.mastoris[at]mwrinfosecurity.com

[*] Parsing data...
Traceback (most recent call last):
File "AzuriteVisualizer.py", line 483, in
main()
File "AzuriteVisualizer.py", line 480, in main
parseJson()
File "AzuriteVisualizer.py", line 55, in parseJson
vnetNode['label'] = data['subscriptionVNETs']['vnetName']
TypeError: list indices must be integers, not str

I am on Windows 10 running from cmd.

KeyError in Line 123 of parseJson

When I ran this script, I received a KeyError: 'vmNetworkConfigurationIpConfigurations' which was a reference I didn't see anywhere else in the file. I deleted it out, and the script ran great.