Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Azure VM Public IP Address Not Showing #1700

Open
OlexTratisky opened this issue Mar 3, 2025 · 3 comments
Open

Azure VM Public IP Address Not Showing #1700

OlexTratisky opened this issue Mar 3, 2025 · 3 comments
Labels
bug Something isn't working potential Unconfirmed issue

Comments

@OlexTratisky
Copy link

OlexTratisky commented Mar 3, 2025

Hello,

i am running scout suite on azure, and it is returning a lot of data but i noticed that it does not return the public ipaddress of the virtual machine. the internal ip address is returned correctly though.

I am gretting on the js files that are stored in /scoutsuite-report/scoutsuite-results to test that.

vi scoutsuite-report/scoutsuite-results/scoutsuite_results_azure-tenant-74fa26d5-9363-45b8-9688-9fdd93daca14.js
"load_balancer_backend_address_pools": null,
"load_balancer_inbound_nat_rules": null,
"name": "ipconfig1",
"primary": true,
"private_ip_address": "10.1.0.4",
"private_ip_address_version": "IPv4",
"private_ip_allocation_method": "Dynamic",
"provisioning_state": "Succeeded",
"public_ip_address": null,
"subnet": {
"id": "scoutid-7775305468fb52c52781bbca316e571d768990f1",
"virtual_network_id": "scoutid-0ddf5a59c74ccd271a2340a7fa1adb0d22ea984e"
},
"virtual_network_taps": null
},

Can you please advise

command:
scout azure -u [email protected] -p xxxx --user-account --tenant xxxx --no-browser --all-subscriptions -f --debug

output:
Launching Scout
2025-03-03 19:55:59 kali scout[670803] INFO Authenticating to cloud provider
2025-03-03 19:56:00 kali scout[670803] INFO Running against subscription a5d9d091-62c7-4e12-b958-e9ec1336b69e
2025-03-03 19:56:00 kali scout[670803] INFO Gathering data from APIs
2025-03-03 19:56:00 kali scout[670803] INFO Fetching resources for the Azure Active Directory service
2025-03-03 19:56:00 kali scout[670803] INFO Fetching resources for the RBAC service
2025-03-03 19:56:00 kali scout[670803] INFO Fetching resources for the Security Center service
2025-03-03 19:56:00 kali scout[670803] INFO Fetching resources for the SQL Database service
2025-03-03 19:56:00 kali scout[670803] INFO Fetching resources for the Storage Accounts service
2025-03-03 19:56:00 kali scout[670803] INFO Fetching resources for the Key Vault service
2025-03-03 19:56:00 kali scout[670803] INFO Fetching resources for the Network service
2025-03-03 19:56:00 kali scout[670803] INFO Fetching resources for the Virtual Machines service
2025-03-03 19:56:00 kali scout[670803] INFO Fetching resources for the App Services service
2025-03-03 19:56:00 kali scout[670803] INFO Fetching resources for the MySQL Database service
2025-03-03 19:56:00 kali scout[670803] INFO Fetching resources for the PostgresSQL Database service
2025-03-03 19:56:00 kali scout[670803] INFO Fetching resources for the Logging Monitoring service
2025-03-03 19:56:01 kali scout[670803] DEBUG Failed to retrieve regulatory compliance standards: (Subscription with no standard pricing bundle) Regulatory compliance is not supported for subscription 'a5d9d091-62c7-4e12-b958-e9ec1336b69e' as it has no standard pricing bundle
Code: Subscription with no standard pricing bundle
Message: Regulatory compliance is not supported for subscription 'a5d9d091-62c7-4e12-b958-e9ec1336b69e' as it has no standard pricing bundle
2025-03-03 19:56:03 kali scout[670803] INFO Running pre-processing engine
2025-03-03 19:56:03 kali scout[670803] INFO Running rule engine
2025-03-03 19:56:03 kali scout[670803] DEBUG Loading ruleset /root/venv/lib/python3.13/site-packages/ScoutSuite/providers/azure/rules/rulesets/default.json
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Azure Active Directory rule "Guest Users in Use" (aad-guest-users.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Azure Active Directory rule "Users Can Create Security Group Enabled" (aad-users-create-security-groups-disabled.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing App Services rule "App Service Authentication Disabled" (appservice-authentication-disabled.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing App Services rule "Client Certificates Disabled" (appservice-client-certificates-disabled.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing App Services rule "FTP Deployment Enabled" (appservice-ftp-deployment-enabled.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing App Services rule "HTTP 2.0 Disabled" (appservice-http-2-disabled.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing App Services rule "HTTP Traffic Allowed" (appservice-http-allowed.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing App Services rule "Managed Service Identities Disabled" (appservice-managed-service-identities-disabled.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing App Services rule "Web App Running an Outdated .Net Framework Version" (appservice-outdated-version-dotnet.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing App Services rule "Web App Running an Outdated Java Version" (appservice-outdated-version-java.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing App Services rule "Web App Running an Outdated PHP Version" (appservice-outdated-version-php.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing App Services rule "Web App Running an Outdated Python Version" (appservice-outdated-version-python.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing App Services rule "Insecure TLS Version Supported" (appservice-tls-v1-supported.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Key Vault rule "Key Vault Not Recoverable" (keyvault-not-recoverable.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Key Vault rule "Key Vaults Allowing Public Network Access" (keyvault-public-traffic-allowed.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Key Vault rule "Key Vault Role Based Access Control Disabled" (keyvault-rbac-authorization-disabled.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Logging Monitoring rule "Activity Log Alert Does Not Exist for Create Policy Assignment" (logging-monitoring-log-alert-not-exist-create-policy-assignment.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Logging Monitoring rule "Activity Log Alert Does Not Exist for Create/Update Network Security Group" (logging-monitoring-log-alert-not-exist-nsg.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Logging Monitoring rule "Activity Log Alert Does Not Exist for Delete Network Security Group" (logging-monitoring-log-alert-not-exist-nsg.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Logging Monitoring rule "Activity Log Alert Does Not Exist for Create/Update Network Security Group Rule" (logging-monitoring-log-alert-not-exist-nsg.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Logging Monitoring rule "Activity Log Alert Does Not Exist for Delete Network Security Group Rule" (logging-monitoring-log-alert-not-exist-nsg.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Logging Monitoring rule "Activity Log Alert Does Not Exist for Create/Update/Delete SQL Server Firewall Rule" (logging-monitoring-log-alert-not-exist-nsg.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Logging Monitoring rule "Activity Log Alert Does Not Exist for Create/Update Security Solution" (logging-monitoring-log-alert-not-exist-security-solution.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Logging Monitoring rule "Activity Log Alert Does Not Exist for Delete Security Solution" (logging-monitoring-log-alert-not-exist-security-solution.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Logging Monitoring rule "Audit Profile Does Not Capture All Activities" (logging-monitoring-profile-does-not-capture-all-activities.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing MySQL Database rule "Enforce SSL Connection Is Disabled for MySQL Database Server" (mysql-database-servers-ssl-enforcement-disabled.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Network rule "Security Group Rules Allowing All Inbound Access" (network-security-groups-rule-inbound-internet-all.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Network rule "Security Group Rules Allowing Inbound MsSQL Access" (network-security-groups-rule-inbound-service-mssql.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Network rule "Security Group Rules Allowing Inbound UDP Access" (network-security-groups-rule-inbound-service-udp.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Network rule "Security Group Rules Allowing Inbound RDP Access" (network-security-groups-rule-inbound-service.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Network rule "Security Group Rules Allowing Inbound SSH Access" (network-security-groups-rule-inbound-service.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Network rule "Network Watchers Not Enabled" (network-watcher-not-enabled.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Network rule "Network Watchers Not Provisioned" (network-watcher-not-provisioned.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing PostgresSQL Database rule "PostgreSQL Database Allow Ingress 0.0.0.0/0 (Any IP)" (postgresql-database-servers-allow-any-ip.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing PostgresSQL Database rule "Server Parameter Connection Throttling Not Set to 'ON'" (postgresql-database-servers-connection-throttling-not-on.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing PostgresSQL Database rule "Server Parameter Log Checkpoints Not Set to 'ON'" (postgresql-database-servers-log-checkpoints-not-on.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing PostgresSQL Database rule "Server Parameter Log Connections Not Set to 'ON'" (postgresql-database-servers-log-connections-not-on.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing PostgresSQL Database rule "Server Parameter Log Disconnections Not Set to 'ON'" (postgresql-database-servers-log-disconnections-not-on.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing PostgresSQL Database rule "Server Parameter Log Duration Not Set to 'ON'" (postgresql-database-servers-log-duration-not-on.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing PostgresSQL Database rule "Server Parameter Log Retention Days Less Than 4" (postgresql-database-servers-log-retention-days-less-than-4.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing PostgresSQL Database rule "Enforce SSL Connection Is Disabled for PostgreSQL Database Server" (postgresql-database-servers-ssl-enforcement-disabled.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing RBAC rule "No Administering Resource Locks Role" (rbac-administering-resource-locks-assigned.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing RBAC rule "Custom Subscription Owner Role Not Allowed" (rbac-custom-subscription-owner-role-not-allowed.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Security Center rule "No Automatic Provisioning of Monitoring Agent" (securitycenter-auto-provisioning-off.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Security Center rule "No Security Contact Email Set" (securitycenter-security-contacts-email-not-set.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Security Center rule ""Sending Email to Security Contact on Alert" Is "Off"" (securitycenter-security-contacts-no-admin-email-notifications.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Security Center rule ""Sending Email to Administrators on Alert" Is "Off"" (securitycenter-security-contacts-no-email-notifications.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Security Center rule "No Security Contact Phone Set" (securitycenter-security-contacts-phone-not-set.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Security Center rule "No Security Contact Set" (securitycenter-security-contacts-not-set.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Security Center rule "Microsoft Cloud App Security (MCAS) Is Disabled" (securitycenter-settings-MCAS-integration-disabled.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Security Center rule "Windows Defender ATP (WDATP) Is Disabled" (securitycenter-settings-WDATP-integration-disabled.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Security Center rule "Standard Tier Not Enabled" (securitycenter-standard-tier-not-enabled.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing SQL Database rule "SQL Database Allow Ingress 0.0.0.0/0 (Any IP)" (sqldatabase-allow-any-ip.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing SQL Database rule "Short Auditing Retention Period for SQL Databases" (sqldatabase-databases-auditing-low-retention.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing SQL Database rule "Auditing Disabled for SQL Databases" (sqldatabase-databases-no-auditing.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing SQL Database rule "Threat Detection Disabled for SQL Databases" (sqldatabase-databases-no-threat-detection.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing SQL Database rule "Data Encryption Disabled for SQL Databases" (sqldatabase-databases-no-transparent-data-encryption.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing SQL Database rule "Threat Detection Alerts Disabled for SQL Databases" (sqldatabase-databases-threat-detection-disabled-alerts.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing SQL Database rule "Short Threat Detection Period for SQL Databases" (sqldatabase-databases-threat-detection-low-retention.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing SQL Database rule "Send Threat Detection Alerts Disabled for SQL Databases" (sqldatabase-databases-threat-detection-send-alerts-disabled.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing SQL Database rule "SQL Server TDE Protector Not Encrypted with Customer-Managed Key" (sqldatabase-servers-TDE-not-encrypted-with-customer-managed-key.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing SQL Database rule "Short Auditing Retention Period for SQL Servers" (sqldatabase-servers-auditing-low-retention.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing SQL Database rule "Azure Active Directory Admin Not Configured for SQL Servers" (sqldatabase-servers-no-ad-admin-configured.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing SQL Database rule "Auditing Disabled for SQL Servers" (sqldatabase-servers-no-auditing.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing SQL Database rule "Advanced Threat Protection (ATP) Disabled for SQL Servers" (sqldatabase-servers-no-threat-detection.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing SQL Database rule "Advanced Threat Protection Disabled Types for SQL Servers" (sqldatabase-servers-threat-detection-disabled-alerts.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing SQL Database rule "Short Threat Detection Retention Period for SQL Servers" (sqldatabase-servers-threat-detection-low-retention.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing SQL Database rule "Send Advanced Threat Protection Alerts Disabled for SQL Servers" (sqldatabase-servers-threat-detection-send-alerts-disabled.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing SQL Database rule "Vulnerability Assessment (VA) Is Disabled on SQL Servers" (sqldatabase-servers-vulnerability-assessments-disabled.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing SQL Database rule "Send Email Notifications to Admins and Subscription Owners Is Not Set on SQL Servers" (sqldatabase-servers-vulnerability-email-notif-to-admins-owners-not-set.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing SQL Database rule "Periodic Recurring Scans Is Disabled on SQL Servers" (sqldatabase-servers-vulnerability-recurring-scans-disabled.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing SQL Database rule "Send Scan Report to Is Not Configured on SQL Servers" (sqldatabase-servers-vulnerability-send-scan-reports-to-not-configured.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Storage Accounts rule "Access Keys Not Rotated" (storageaccount-access-keys-not-rotated.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Storage Accounts rule "Secure Transfer (HTTPS) Not Enforced" (storageaccount-account-allowing-clear-text.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Storage Accounts rule "Storage Not Encrypted with Customer Managed Key" (storageaccount-encrypted-not-customer-managed.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Storage Accounts rule "Storage Accounts Allowing Public Traffic" (storageaccount-public-traffic-allowed.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Storage Accounts rule "Trusted Microsoft Services Enabled" (storageaccount-trusted-microsoft-services.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Storage Accounts rule "Blob Containers Allowing Public Access" (storageaccount-public-blob-container.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Storage Accounts rule "Storage Account Soft Delete Disabled" (storageaccount-soft-delete-enabled.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Virtual Machines rule "Disks Lacking Encryption" (virtual-machines-disk-encryption.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Virtual Machines rule "OS and Data Disks Not Encrypted with CMK" (virtual-machines-os-data-encrypted-cmk.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Virtual Machines rule "Unattached Disks Not Encrypted with CMK" (virtual-machines-unattached-disks-encrypted-cmk.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Virtual Machines rule "Virtual Machine Extensions Installed" (virtual-machines-extensions-installed.json)
2025-03-03 19:56:03 kali scout[670803] DEBUG Processing Virtual Machines rule "Virtual Machines Not Utilizing Managed Disks" (virtual-machines-managed-disks.json)
2025-03-03 19:56:03 kali scout[670803] INFO Applying display filters
2025-03-03 19:56:03 kali scout[670803] DEBUG Loading ruleset /root/venv/lib/python3.13/site-packages/ScoutSuite/providers/azure/rules/rulesets/filters.json
2025-03-03 19:56:03 kali scout[670803] INFO Running post-processing engine
2025-03-03 19:56:03 kali scout[670803] INFO Saving data to scoutsuite-report/scoutsuite-results/scoutsuite_results_azure-tenant-74fa26d5-9363-45b8-9688-9fdd93daca14.js
2025-03-03 19:56:03 kali scout[670803] INFO Saving data to scoutsuite-report/scoutsuite-results/scoutsuite_exceptions_azure-tenant-74fa26d5-9363-45b8-9688-9fdd93daca14.js
2025-03-03 19:56:03 kali scout[670803] INFO Creating scoutsuite-report/azure-tenant-74fa26d5-9363-45b8-9688-9fdd93daca14.html

@OlexTratisky OlexTratisky added bug Something isn't working potential Unconfirmed issue labels Mar 3, 2025
@ZEROTRACEPENTEST
Copy link

ZEROTRACEPENTEST commented Mar 6, 2025 via email

@OlexTratisky
Copy link
Author

@ZEROTRACEPENTEST i didn't get your comment. Do you suggest looking at other branches like dev? is this a regression?

@OlexTratisky
Copy link
Author

hello, anyone facing similar issues in latest version? regression?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working potential Unconfirmed issue
Projects
None yet
Development

No branches or pull requests

2 participants