Thursday, August 27, 2020

CloudFrunt - A Tool For Identifying Misconfigured CloudFront Domains


CloudFrunt is a tool for identifying misconfigured CloudFront domains.

Background
CloudFront is a Content Delivery Network (CDN) provided by Amazon Web Services (AWS). CloudFront users create "distributions" that serve content from specific sources (an S3 bucket, for example).
Each CloudFront distribution has a unique endpoint for users to point their DNS records to (ex. d111111abcdef8.cloudfront.net). All of the domains using a specific distribution need to be listed in the "Alternate Domain Names (CNAMEs)" field in the options for that distribution.
When a CloudFront endpoint receives a request, it does NOT automatically serve content from the corresponding distribution. Instead, CloudFront uses the HOST header of the request to determine which distribution to use. This means two things:

  1. If the HOST header does not match an entry in the "Alternate Domain Names (CNAMEs)" field of the intended distribution, the request will fail.
  2. Any other distribution that contains the specific domain in the HOST header will receive the request and respond to it normally.
This is what allows the domains to be hijacked. There are many cases where a CloudFront user fails to list all the necessary domains that might be received in the HOST header. For example:
  • The domain "test.disloops.com" is a CNAME record that points to "disloops.com".
  • The "disloops.com" domain is set up to use a CloudFront distribution.
  • Because "test.disloops.com" was not added to the "Alternate Domain Names (CNAMEs)" field for the distribution, requests to "test.disloops.com" will fail.
  • Another user can create a CloudFront distribution and add "test.disloops.com" to the "Alternate Domain Names (CNAMEs)" field to hijack the domain.
This means that the unique endpoint that CloudFront binds to a single distribution is effectively meaningless. A request to one specific CloudFront subdomain is not limited to the distribution it is associated with.

Installation
$ pip install boto3
$ pip install netaddr
$ pip install dnspython
$ git clone https://github.com/disloops/cloudfrunt.git
$ cd cloudfrunt
$ git clone https://github.com/darkoperator/dnsrecon.git
CloudFrunt expects the dnsrecon script to be cloned into a subdirectory called dnsrecon.

Usage
cloudfrunt.py [-h] [-l TARGET_FILE] [-d DOMAINS] [-o ORIGIN] [-i ORIGIN_ID] [-s] [-N]

-h, --help Show this message and exit
-s, --save Save the results to results.txt
-N, --no-dns Do not use dnsrecon to expand scope
-l, --target-file TARGET_FILE File containing a list of domains (one per line)
-d, --domains DOMAINS Comma-separated list of domains to scan
-o, --origin ORIGIN Add vulnerable domains to new distributions with this origin
-i, --origin-id ORIGIN_ID The origin ID to use with new distributions

Example
$ python cloudfrunt.py -o cloudfrunt.com.s3-website-us-east-1.amazonaws.com -i S3-cloudfrunt -l list.txt

CloudFrunt v1.0.3

[+] Enumerating DNS entries for google.com
[-] No issues found for google.com

[+] Enumerating DNS entries for disloops.com
[+] Found CloudFront domain --> cdn.disloops.com
[+] Found CloudFront domain --> test.disloops.com
[-] Potentially misconfigured CloudFront domains:
[#] --> test.disloops.com
[+] Created new CloudFront distribution EXBC12DE3F45G
[+] Added test.disloops.com to CloudFront distribution EXBC12DE3F45G


Related word


  1. Pentest Tools Online
  2. Hackers Toolbox
  3. Hacking Tools Online
  4. Hacker Tools For Windows
  5. Hacker Tools Free Download
  6. Hacker Tools Apk Download
  7. Tools Used For Hacking
  8. Hacker Tools Linux
  9. Hack Tools For Pc
  10. Pentest Tools For Ubuntu
  11. Hacker Tools Free Download
  12. Hacker Tools Software
  13. Hacker Tools Apk
  14. Hack Tools For Mac
  15. Top Pentest Tools
  16. Bluetooth Hacking Tools Kali
  17. Hacking Tools For Beginners
  18. Termux Hacking Tools 2019
  19. Tools For Hacker
  20. Best Pentesting Tools 2018
  21. Hack Tool Apk
  22. Pentest Tools Find Subdomains
  23. Pentest Tools Find Subdomains
  24. Hacking App
  25. How To Install Pentest Tools In Ubuntu
  26. Wifi Hacker Tools For Windows
  27. Hacking Tools Free Download
  28. Pentest Tools For Windows
  29. Hacker Tools For Windows
  30. Hacker Tools Free Download
  31. Hacker Tools For Windows
  32. Hacker
  33. Hacker Tools Free Download
  34. Hacker Tools Apk
  35. How To Hack
  36. Tools For Hacker
  37. Hacker Tools For Mac
  38. Hacker Tools Windows
  39. Hack Tools Pc
  40. Hacker Tools Github
  41. Hacker Tools Windows
  42. Pentest Tools Bluekeep
  43. Hacker Tools List
  44. Hacking Apps
  45. Free Pentest Tools For Windows
  46. World No 1 Hacker Software
  47. Hack Tools Online
  48. Hacker
  49. Android Hack Tools Github
  50. Hacker Tools Linux
  51. Android Hack Tools Github
  52. Pentest Tools Subdomain
  53. Beginner Hacker Tools
  54. Hacking Tools Github
  55. Pentest Tools List
  56. Pentest Tools Linux
  57. What Are Hacking Tools
  58. Hacker Tools For Windows
  59. Hacking Tools Software
  60. Hacking Tools Windows 10
  61. Hack Tools For Pc
  62. What Are Hacking Tools
  63. Pentest Tools Port Scanner
  64. Hack Website Online Tool
  65. How To Make Hacking Tools
  66. Pentest Recon Tools
  67. Pentest Tools Tcp Port Scanner
  68. Pentest Tools Download
  69. Hacker Tools For Windows
  70. Hacker Tools Linux
  71. Growth Hacker Tools
  72. Hack Tools For Pc
  73. Hacking Tools 2019
  74. Wifi Hacker Tools For Windows
  75. Pentest Tools Kali Linux
  76. Hacking Tools For Windows Free Download
  77. Physical Pentest Tools
  78. Usb Pentest Tools
  79. Hacker Tools Free Download
  80. Hacking Tools Pc
  81. Pentest Tools Apk
  82. Pentest Tools Tcp Port Scanner
  83. Hacker
  84. Hacker Techniques Tools And Incident Handling
  85. Hackers Toolbox
  86. Hacking Tools For Beginners
  87. Hacker Tools Windows
  88. Hacking Tools Github
  89. Install Pentest Tools Ubuntu
  90. Hacking Tools Github
  91. Hackrf Tools
  92. Pentest Tools Framework
  93. Computer Hacker
  94. Hacker Tools
  95. Nsa Hacker Tools
  96. Hack Tools For Ubuntu
  97. Underground Hacker Sites
  98. Hacking Tools For Windows
  99. Pentest Tools Port Scanner
  100. Growth Hacker Tools
  101. Pentest Reporting Tools
  102. Hack Tools Online
  103. Bluetooth Hacking Tools Kali
  104. Pentest Tools For Ubuntu
  105. Pentest Box Tools Download
  106. New Hacker Tools
  107. Hack Tools For Games
  108. Hacker Tools Hardware
  109. Pentest Tools Review
  110. Hack Tools Mac
  111. Hack Tools For Pc
  112. Hacker Tools For Pc
  113. Hacker Tools List
  114. Hacking Tools For Beginners
  115. Hack App
  116. Hack Rom Tools
  117. Hacking Tools 2020
  118. Nsa Hack Tools
  119. Hacker Tools Windows
  120. Hacking Tools For Kali Linux
  121. Game Hacking
  122. Pentest Automation Tools
  123. Hacker Tools Software
  124. Best Pentesting Tools 2018
  125. Hacker Tools For Mac
  126. Hacker Tools 2019
  127. Hacker Tools For Ios
  128. Hacker Tools Mac
  129. What Is Hacking Tools
  130. Free Pentest Tools For Windows
  131. Hacker Tools Hardware
  132. Pentest Tools Online
  133. Kik Hack Tools
  134. Hacking Tools For Windows 7
  135. Pentest Tools Nmap
  136. Pentest Tools Open Source
  137. Hacker Tools Online
  138. Ethical Hacker Tools
  139. Hacker Hardware Tools
  140. Hacking Tools For Windows 7
  141. Termux Hacking Tools 2019
  142. Pentest Recon Tools
  143. Physical Pentest Tools
  144. Android Hack Tools Github
  145. Pentest Tools For Ubuntu
  146. Hacker Search Tools
  147. Wifi Hacker Tools For Windows
  148. Hacking Tools Kit
  149. What Is Hacking Tools
  150. Pentest Tools Alternative
  151. Ethical Hacker Tools
  152. Hack Tools Download
  153. Hacker Tools List
  154. Growth Hacker Tools
  155. Hacking Tools For Windows 7
  156. Hack Website Online Tool
  157. Hacking Apps
  158. Best Hacking Tools 2020
  159. Hacker Tools Linux
  160. Wifi Hacker Tools For Windows
  161. Hack Tools For Games
  162. Blackhat Hacker Tools
  163. Pentest Tools Github
  164. Wifi Hacker Tools For Windows
  165. Pentest Tools For Android
  166. Best Pentesting Tools 2018
  167. What Is Hacking Tools
  168. Hacking Tools Free Download
  169. Nsa Hack Tools
  170. Pentest Tools Github
  171. Hack Tools Pc
  172. Hacking Tools For Pc
  173. Hack Tools For Windows
  174. Pentest Tools Online
  175. Pentest Tools For Android
  176. Hacking Tools Github
  177. Hacking Tools For Mac
  178. Hack Tools For Windows