> For the complete documentation index, see [llms.txt](https://vix-w1zzer.gitbook.io/vixwizzer/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://vix-w1zzer.gitbook.io/vixwizzer/notes/cloud/azure/tool-azureck.md).

# Tool: azureck

#### Why I'm even here at the first place

I was reading [Penetration Testing Azure for Ethical Hackers](https://www.amazon.com/Penetration-Testing-Azure-Ethical-Hackers/dp/1839212934) (btw it's kinda outdated by now, regarding to the terms. Good news tho, they will release [2nd edition](https://www.amazon.com/Penetration-Testing-Azure-Ethical-Hackers-ebook/dp/B0FPVB1FZQ) soon), in the book it mentioned a tool named [cloudipchecker](https://github.com/deanobalino/cloudipchecker) by Dean Bryen, it's not maintained as it seems, so I figured I'll just make a similar tool for it, same task and probably simpler workflow now. And it's written in Go which is the greatest language ever so that's whatsup. 

I know there's ton of tools like this, but I just want to know how it works. There's no better way to learn by doing it, so that's why I created this tool. enough yapping, let's get into it.

### azureck

Here's the link to the tool: <https://github.com/V1xW1zz3r/azureck>

Anyway, I'll just tell you how to use it here

### Usage and examples

I made the syntax as simple as it can get, all you need to remember is probably just the `-d` flag

#### **Usual usage**

```bash
azureck -d < IP || domain || list.txt >
```

#### **Authenticated through Azure API**

This requires the Azure CLI to be authenticated first. Use `-l` if your subscription restricts control-plane queries to specific regions or if you are scanning within a sovereign/private cloud (e.g., Azure Gov)

You can learn more [here](https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-welcome#list-of-regions) about **usgov** and [here](https://docs.azure.cn/en-us/reliability/regions-list) about **azure china** (about china, it's kinda weird, cuz if you compared the site [here](https://learn.microsoft.com/en-us/azure/china/overview-regions), which is what you usually gets, they don't list out the Programmatic name on the table, idk why, but at least azure.cn has it)

```bash
az login

# Sovereign cloud or region restricted policy query
azureck -s "<your_subID>" -l "usgovvirginia" -d 150.171.84.20
```

You know what, just because I love you, I'll list those out for you:

**Azure US Government**

<table><thead><tr><th>Region</th><th width="134.8931884765625">Availability zone support</th><th>Paired region</th><th>Geography</th><th>Programmatic name</th></tr></thead><tbody><tr><td>US Gov Arizona</td><td></td><td>US Gov Texas</td><td>US Government</td><td>usgovarizona</td></tr><tr><td>US Gov Texas</td><td></td><td>US Gov Arizona</td><td>US Government</td><td>usgovtexas</td></tr><tr><td>US Gov Virginia</td><td><img src="https://learn.microsoft.com/en-us/azure/azure-government/media/check-mark.svg" alt="Yes"></td><td>US Gov Texas</td><td>US Government</td><td>usgovvirginia</td></tr></tbody></table>

**Azure China (21Vianet)**

<table><thead><tr><th>Region</th><th width="134.893310546875">Availability zone support</th><th>Paired region</th><th>Geography</th><th>Programmatic name</th></tr></thead><tbody><tr><td>China East</td><td></td><td>China North</td><td>China</td><td>chinaeast</td></tr><tr><td>China East 2</td><td></td><td>China North 2</td><td>China</td><td>chinaeast2</td></tr><tr><td>China East 3*</td><td></td><td>China North 3</td><td>China</td><td>chinaeast3</td></tr><tr><td>China North</td><td></td><td>China East</td><td>China</td><td>chinanorth</td></tr><tr><td>China North 2</td><td></td><td>China East 2</td><td>China</td><td>chinanorth2</td></tr><tr><td>China North 3</td><td><img src="https://learn.microsoft.com/en-us/azure/azure-government/media/check-mark.svg" alt="Yes"></td><td>China East 3</td><td>China</td><td>chinanorth3</td></tr></tbody></table>

#### **Local Scan**

I made it easy for you if you want to query this offline, you can get the Azure IP Ranges and Service Tags json file [here](https://www.microsoft.com/en-us/download/details.aspx?id=56519)

```bash
azureck -f ServiceTags_Public_20260622.json -d 20.60.120.10
```

#### Thoughts

Any suggestions are welcomed, I made this with AI cuz I can't freaking code (at least I can read) You might ask: does it work? DUH. In fact, it works very well, I highly recommend using AI to create tools if you have any ideas but can't execute it. And yes, I did check and validate all the code. This was a little fun project, learned quite a lot from it.&#x20;

Again, if you want to roast me or suggest where I should do better, everything is welcomed, hopefully you find it helpful. I'm heading out, bye.