BishopFox/cloudfox

Health v2 · maintenance only

Adoption not part of the score

2563 stars · 254 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

CloudFox is an open-source command line tool by Bishop Fox that automates situational awareness and enumeration in cloud environments, primarily AWS, to help penetration testers find exploitable attack paths. It runs modular checks (or an all-checks command) with limited read-only credentials and supports both white-box and black-box enumeration.

Use cases

• enumerate aws account resources and regions during a pentest
• find secrets in ec2 userdata and environment variables
• identify overly permissive iam role trusts and cross-account assumption
• map attack paths from public internet or vpc internal starting points
• enumerate permissions of an aws principal
• discover mountable filesystems from a compromised vpc resource

When to choose

• you are a penetration tester or red teamer assessing an unfamiliar aws environment
• you need automated enumeration of aws attack paths with read-only credentials
• you want to use found credentials for black-box cloud enumeration

When to avoid

• you need Azure, GCP, or Kubernetes support, which is not yet implemented
• you want a cloud security posture management or compliance auditing tool rather than offensive enumeration
• you need a gui or continuous monitoring solution

Facets

cli-tool · maturity active

penetration-testing security cli developer-tools security cloud-computing penetration-testing developer-tools cli windows go aws-enumeration cloud-pentesting attack-path-discovery offensive-security situational-awareness red-team linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="BishopFox/cloudfox")