cloudtoolkit v0.1.3 releases: Cloud Penetration Testing Toolkit

cloudtoolkit

Cloud Penetration Testing Toolkit

Capability overview

Providers Payload Supported
Alibaba Cloud backdoor-user: Backdoored user can be used to obtain persistence in the Cloud environment.
bucket-dump: Quickly enumerate buckets to look for loot.
cloudlist: Getting Assets from Cloud Providers to augment Attack Surface Management efforts.
ECS (Elastic Compute Service)
OSS (Object Storage Service)
RAM (Resource Access Management)
RDS (Relational Database Service)
Tencent Cloud cloudlist Getting: Assets from Cloud Providers to augment Attack Surface Management efforts.
backdoor-user: Backdoored user can be used to obtain persistence in the Cloud environment.
bucket-dump: Quickly enumerate buckets to look for loot.
CVM (Cloud Virtual Machine)
Lighthouse
COS (Cloud Object Storage)
CAM (Cloud Access Management)
Huawei Cloud backdoor-user” Backdoored user can be used to obtain persistence in the Cloud environment.
bucket-dump” Quickly enumerate buckets to look for loot.
cloudlist” Getting Assets from Cloud Providers to augment Attack Surface Management efforts.
ECS (Elastic Cloud Server)
OBS (Object Storage Service)
IAM (Identity and Access Management)
RDS (Relational Database Service)
Microsoft Azure backdoor-user: Backdoored user can be used to obtain persistence in the Cloud environment.
bucket-dump: Quickly enumerate buckets to look for loot.
cloudlist: Getting Assets from Cloud Providers to augment Attack Surface Management efforts.
Virtual Machines
Blob Storage
AWS (Amazon web services) cloudlist: Getting Assets from Cloud Providers to augment Attack Surface Management efforts.
backdoor-user: Backdoored user can be used to obtain persistence in the Cloud environment.
bucket-dump: Quickly enumerate buckets to look for loot.
EC2 (Elastic Compute Cloud)
S3 (Simple Storage Service)
IAM (Identity and Access Management)
GCP (Google Cloud Platform) cloudlist Compute Engine
Cloud DNS

Changelog v0.1.2

  • 2eaecc2 feat(sls):support ListProject for Aliyun SLS
  • f5d189b fix(aliyun):DescribeInvocationResults need to wait for the results
  • 0da41d1 fix(rds):support list all regions
  • e6123f2 fix(tencent):DescribeInstances support paging, fixes #1
  • 9e83a91 perf(sdk):Upgrade go.mod

Download

Copyright (c) 2022 404tk