{"id":31332,"date":"2023-11-22T11:02:21","date_gmt":"2023-11-22T11:02:21","guid":{"rendered":"https:\/\/kalilinuxtutorials.com\/?p=31332"},"modified":"2023-11-22T11:02:22","modified_gmt":"2023-11-22T11:02:22","slug":"goblob","status":"publish","type":"post","link":"https:\/\/kalilinuxtutorials.com\/goblob\/","title":{"rendered":"Goblob: Azure Blob Storage Enumeration Tool"},"content":{"rendered":"\n

Goblob is a lightweight and fast enumeration tool designed to aid in the discovery of sensitive information exposed publicy in Azure blobs, which can be useful for various research purposes such as vulnerability assessments, penetration testing, and reconnaissance.<\/p>\n\n\n\n

Warning<\/em>. Goblob will issue individual goroutines for each container name to check in each storage account, only limited by the maximum number of concurrent goroutines specified in the -goroutines<\/code> flag. This implementation can exhaust bandwidth pretty quickly in most cases with the default wordlist, or potentially cost you a lot of money if you’re using the tool in a cloud environment. Make sure you understand what you are doing before running the tool.<\/p>\n\n\n\n

<\/a>Installation<\/strong><\/h2>\n\n\n\n
go install github.com\/Macmod\/goblob@latest<\/code><\/pre>\n\n\n\n
Usage<\/strong><\/h2>\n\n\n\n
To use goblob simply run the following command:<\/p>\n\n\n\n
$ .\/goblob <storageaccountname><\/code><\/pre>\n\n\n\n
Where <storageaccountname><\/code> is the target storage account to enumerate public Azure blob storage URLs on.<\/p>\n\n\n\n
You can also specify a list of storage account names to check:<\/p>\n\n\n\n
$ .\/goblob -accounts accounts.txt<\/code><\/pre>\n\n\n\n
By default, the tool will use a list of common Azure Blob Storage container names to construct potential URLs. However, you can also specify a custom list of container names using the -containers<\/code> option. For example:<\/p>\n\n\n\n
$ .\/goblob -accounts accounts.txt -containers wordlists\/goblob-folder-names.txt<\/code><\/pre>\n\n\n\n
The tool also supports outputting the results to a file using the -output<\/code> option:<\/p>\n\n\n\n
$ .\/goblob -accounts accounts.txt -containers wordlists\/goblob-folder-names.txt -output results.txt<\/code><\/pre>\n\n\n\n
If you want to provide accounts to test via stdin<\/code> you can also omit -accounts<\/code> (or the account name) entirely:<\/p>\n\n\n\n
$ cat accounts.txt | .\/goblob<\/code><\/pre>\n\n\n\n
Wordlists<\/p>\n\n\n\n
Goblob comes bundled with basic wordlists that can be used with the -containers<\/code> option:<\/p>\n\n\n\n