ScoutSuite
Tool manual · Kali & common usage
Cloud · Intermediate · Cloud lane
What is ScoutSuite?
ScoutSuite multi-cloud security auditing (read-only collection + HTML report).
Point-in-time posture review of accounts you own.
Official website: ScoutSuite · Documentation
When do you use it?
- You need Multi-cloud security auditing.
- You are following a CYNARKS lab or authorized engagement that calls for ScoutSuite.
- You already tried simpler checks and need this tool’s deeper capability.
Who uses it?
- Cloud security engineers
- DevSecOps
- Platform / SRE security
How do you use it? (typical flow)
- Install ScoutSuite using the steps below (prefer Kali package or official installer).
- Confirm you have authorization for the target (lab VM, own system, or written scope).
- Run --help / man (or the Help section) to see current flags for your version.
- Start with a safe example from Basic commands against localhost or an authorized lab target.
- Record what you ran, what you observed, and any follow-up (filter, report, remediation).
Help & manual (like man / --help)
Every serious tool has a built-in way to look up flags. Learn these first so you are not stuck memorizing every option.
1. Help
scout --help
2. Repo
https://github.com/nccgroup/ScoutSuite
Kali Linux
pip install scoutsuite
1. Installation
| OS | Installation |
|---|---|
Kali Linux | pip install scoutsuite |
pip | pip install scoutsuite |
2. Basic commands
1. Audit your sandbox account
scout aws --report-dir ./out
Audit your sandbox account
2. Show help
scout --help
List flags for your installed version (same habit as man/--help).
3. Short help
scout -h
Alternate help flag when supported.
5. Useful features
- AWS/Azure/GCP
6. Practical examples
Example 1: Audit your sandbox account
scout aws --report-dir ./out
Audit your sandbox account
Example 2: Show help
scout --help
List flags for your installed version (same habit as man/--help).
Example 3: Short help
scout -h
Alternate help flag when supported.
7. Important notes
- Read-only audit of cloud accounts you own.
- Authorized targets only — labs, systems you own, or written permission.
- Prefer reading --help / man / official docs for your installed version; flags change over time.
Related course: cloud security · Commands: /commands#cloud