Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsCloudFox is an open-source command-line enumeration tool for authorized cloud penetration tests and offensive-security assessments. It gathers information about cloud identities, permissions, workloads, endpoints, secrets and other relationships so a tester can investigate possible attack paths. It does not, by itself, prove that every reported condition is exploitable.
Bishop Fox introduced CloudFox on September 13, 2022 with AWS support. The launch article listed Azure, Google Cloud Platform (GCP) and Kubernetes as roadmap items; current project documentation lists AWS, Azure and GCP support.
What CloudFox is
CloudFox codifies recurring shell-based cloud-enumeration work into a portable, modular command-line tool. Its intended users are cloud penetration testers and other offensive-security professionals working with permission from the account or organization owner.
The tool is an information-gathering aid, not an automatic exploit scanner. A finding such as an administrative permission, a reachable endpoint or a secret in metadata still requires validation in the authorized environment, including checking whether the credential is current, usable and in scope.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →#1 Best Overall
- Valued Carpenter Pencil Set: You will get 2 pcs solid carpenter pencils with 26 piece 2.8 mm refills, 1 replaceable sharpener, 1 plastic storage box.The complete carpenter pencils combination allows you to finish your work faster and more easily
- Deep Hole Marker Pencil: The deep-hole construction pencils adopts 45mm elongated tip design, which is more convenient to mark in the small hole or in other tight areas that other carpenter markers cannot reach
- Carpenter Pencils with Sharpener: The sharpener is screwed into the top of the work pencil, which won't get lost either. Built-in pencil sharpener that keep the lead with pointed and smooth to Improves line of sight in fine work
- Stronger Solid Lead: This work pencil is matched with a 2.8 mm thick lead , which is much thicker and stronger during the drawing process of construction work, it will not break or damage easily
- Marks on Various Surfaces: 3 colors solid construction pencil can marks on various surfaces,such as metal, plastic, wood, paper etc. Ideals for woodworkers, contractors, craftsmen, builders, merchants and masons
What Bishop Fox announced in 2022
Seth Art and Carlos Vendramini announced CloudFox on September 13, 2022. That release described AWS as the supported provider and put Azure, GCP and Kubernetes on the roadmap. The announcement framed the project as a way to replace repeated, ad-hoc shell pipelines with a modular workflow.
The launch article also stated: “That said, no matter what permission you run CloudFox with, you can rest assured that nothing will be created, deleted, or updated.” This is the statement made in the 2022 announcement; testers should still review current documentation, credentials and operational controls before running any assessment.
What the current project covers
Current Bishop Fox materials list AWS, Azure and GCP. Provider status and command totals differ slightly by documentation page, so the figures below are snapshots rather than permanent product limits.
Rank #2
- Ergonomically Designed: Work in tight areas with a compact design that gets into tough spots
- Compact and Lightweight: Both tools are designed to fit into difficult to reach spaces. The 1/4" impact driver has a length of 5.55 in. and weighs just 2.8 lbs, while the 1/2" drill/driver measures only 7.5 in. and weighs 3.6 lbs
- Both the DEWALT impact driver and electric drill driver feature integrated LED work lights with a convenient 20-second delay, ensuring enhanced visibility in dimly lit or challenging work areas
- One-Handed Loading - Keep one hand free with a 1/4 in. hex chuck that accepts 1 in. bit tips
- Power drill cordless with 1/2" single sleeve ratcheting chuck provides tight bit gripping strength, making bit changes faster and more secure
| Provider | README command count | Wiki command count | Documented status |
|---|---|---|---|
| AWS | 34 | 34 | Stable |
| Azure | 4 | 4 | Active development |
| GCP | 60 | 58 | Stable |
The README and wiki are the sources for those counts and use different snapshots or counting conventions. A separate Bishop Fox announcement dated February 26, 2026 describes the GCP launch as having 64 modules. “Modules” and “commands” are not necessarily the same unit, so these numbers should not be combined into one total.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Questions CloudFox helps a tester investigate
The project documentation organizes enumeration around practical attack-path questions:
- Which regions does an AWS account use, and approximately how many resources are present?
- Are secrets exposed in EC2 user data or service-specific environment variables?
- Which workloads have administrative permissions attached?
- What actions can the discovered principals perform?
- Do role trust policies allow unintended principals to assume a role?
- Which endpoints, hostnames or IP addresses are reachable from an external or internal starting point?
- Are there filesystems that a workload or identity could potentially mount?
These outputs identify leads for a human-led assessment. CloudFox does not establish exploitability, business impact or authorization to access a target.
Rank #3
- 【Great Compatibility】This Katerk 1/4 inch hex shank bit holder is specifically designed for 1/4 inch hex shank drill bits. It's compatible with most 1/4 fast hex handles, hex sockets, various electric screwdrivers, and handheld screwdrivers. The bit holder makes it a valuable addition for any handyman.
- 【Secure and Safe】Built with a secure backup nut design, each drill bit holder securely locks onto your bits, ensuring they stay firmly in place. Additionally, our bit holder incorporates a high-quality steel ball rolling design that holds up to several kilograms of weight, ensuring your various drill bits don't fall off.
- 【Easy One-Handed Operation】The bit holder for impact driver allows you to change bits single-handedly, simplifying your workflow. Its multi-color design further allows for quick identification of the drill bit you need.
- 【Compact and Convenient】Thanks to its compact size, this 1/4 inch bit holder is easy to carry around. The bit holder allows for easy attachment to various tools, making this a convenient addition to your construction accessories. The Katerk bit holder is cast from high-quality alloy material, promising a long product lifespan. Despite its rugged strength, the bit holder remains lightweight, making it portable.
- 【Cool Christmas Gift For Men Stocking Stuffers】 This screwdriver bit holder, driver bit holder, impact bit holder, can be given as a gift to your loved one, especially for anyone involved in construction or electrical work. It's a must-have for stocking stuffers for men and women, tools gifts for dad, tech gadgets for men, gifts for dad, gifts for him, gifts for husband, gifts for boyfriend, cool gadgets for men, and cool gifts for dad.
GCP capabilities described in 2026
Bishop Fox’s February 26, 2026 GCP announcement describes enumeration of cloud resources, identity permissions and service-account risks across an organization hierarchy. It discusses possible privilege-escalation and lateral-movement analysis when CloudFox is paired with FoxMapper. Those are described capabilities and potential analysis paths, not guaranteed outcomes in every project or organization.
Permissions and prerequisites
AWS
Install and authenticate the AWS CLI with credentials scoped to the assessment. CloudFox can be used in a white-box engagement with limited read-only permissions or in a black-box exercise using credentials discovered during the engagement. The exact visibility depends on the policies attached to the identity.
Free tools Windows power users keep installed
One-click scans. No signup required.
Azure
Use the Azure CLI and an account with viewer-like access appropriate to the subscription, tenant or resource scope being assessed. Broader scopes require corresponding authorization.
Rank #4
- Long Nib and Deep Hole Marker: Our mechanical carpenter pencil with 45mm nib is designed for easy marking of deep holes or narrow areas. These construction pencils are the great choice for woodworking tools, construction tools, carpenter tools, contractor tools, wood carpentry tools and architect tools
- Extra Refills in 2 Colors for Versatile Marking: The construction mechanical pencil comes with 12 extra 2.8mm refills, including 6 red and 6 black refills. The black refill is suitable for light surfaces, while the red wax is perfect for dark surfaces. Our carpenter mechanical pencil makes sure that you'll have an ample supply for extended use
- Built-in Sharpener: Our construction pencil comes with a built-in sharpener to ensure the mechanical pencil tip is always sharp and ready for use. Never buy an extra pencil sharpener again. A great tool for any woodworker pencil, contractor pencils. The refill can easily be extended or retracted with a simple click of the pencils mechanical, allowing you to work more efficiently and accurately
- Portable Clip Design: Our deep hole construction pencil features a portable clip design, easy to carry and attach to your pocket or tool box, so that you can keep the carpenter pencils mechanical close at hand, making it a convenient tool to have on the go. Great gifts choice for carpenters
- Stronger Pencil Lead: The black refills are made of lead, sturdy and smooth. The red refills are made of wax, clear and light. These marking pencils are much thicker and stronger than normal pencils during the marking process of construction work, suitable for various surfaces, such as glasses, metal, boards, floors, walls, furniture, etc. The written marks can be easily wiped with a wet paper towel when needed
GCP
Install the Google Cloud SDK and authenticate it for the project or organization in scope. Bishop Fox says roles/viewer is sufficient for basic single-project enumeration; comprehensive organization-wide work requires additional viewer or reviewer roles described by the project documentation.
Installation and updating
CloudFox is distributed as open-source software rather than as a physical product. The project documents four installation routes:
- Download a release binary.
- Install through Homebrew.
- Install with Go.
- Compile from source.
Use the current repository’s installation instructions for the exact package name, binary architecture and release asset. Before running an assessment, verify the installed version and authenticate the provider CLI that matches the cloud you are testing.
Best Value
- Milwaukee Ink all Fine Point Marker, Black, 4 Per Pack
- 4 per pack Features Clog Resistant Marker Tip Writes through Dusty, Wet and Oily Surfaces Durable Marker Tip for Writing on Concrete, OSB and Rough Surfaces
- Clog resistant tip writes on dusty, wet and oily surfaces and is optimized for rough surfaces such as OSB, cinderblock and concrete
- Hard hat clip- attaches for easy access
- Quick dry time with reduced smearing and marking
Required compatibility update
The repository README carries a December 2025 warning: users need CloudFox v1.17.0 or newer because earlier versions stopped working after AWS changed the format of its public service-mapping file. Treat v1.17.0 as the project-stated minimum, and check the current release for any later requirement before testing.
Typical AWS workflow
- Confirm written authorization, target accounts or organizations, allowed regions and handling rules for discovered secrets.
- Install CloudFox v1.17.0 or newer and the AWS CLI.
- Configure the AWS CLI with the least-privileged credentials that meet the engagement’s goals.
- Run the provider-specific enumeration commands documented by the current release. The AWS documentation includes an all-checks workflow for bundled enumeration.
- Review identities, trust relationships, permissions, workloads, endpoints and exposed data as investigation leads.
- Validate each lead manually and record the identity, scope, evidence and remediation without making unauthorized changes.
How to evaluate CloudFox
| Evaluation question | What to check |
|---|---|
| Provider coverage | AWS and GCP are documented as stable; Azure is listed but marked active development on the wiki. |
| Permission model | Determine whether read-only, viewer-like or broader roles are available and authorized. |
| Workflow style | Use individual modular commands for focused checks or the documented AWS all-checks workflow for a broad pass. |
| Assessment scope | Separate a single account or project review from an organization-wide identity and trust analysis. |
| Maintenance | Check the current release, especially the v1.17.0-or-newer AWS compatibility notice. |
CloudFox versus CloudFoxable
CloudFoxable is a related Bishop Fox practice sandbox for hands-on cloud-security learning. It is separate from the CloudFox enumeration tool and should be treated as a training resource, not as a CloudFox hardware product or a verified commercial affiliate offer.
Is CloudFox an Amazon product?
No. CloudFox is open-source software distributed through binaries, a package manager or source code. There is no supported CloudFox-specific physical Amazon product established by the project materials.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
