|
1 | | -# cloudtoolkit |
2 | | -Cloud Penetration Testing Toolkit |
3 | | - |
4 | | -## Usage |
5 | | -Reference [Wiki](https://github.com/404tk/cloudtoolkit/wiki) |
6 | | - |
7 | | -## Capability overview |
8 | | - |
9 | | -| Provider | Payload | Supported | |
10 | | -| :-------------------------: | :-----------------------------------------: | :----------------------------------------------------------: | |
11 | | -| Alibaba Cloud | cloudlist<br/>backdoor-user<br/>bucket-dump<br/>event-dump<br/>exec-command<br/>database-account | ECS <br/>OSS<br/>RAM <br/>RDS <br/>SMS <br/>AliDNS<br/>SLS | |
12 | | -| Tencent Cloud | cloudlist<br/>backdoor-user<br/>exec-command | CVM <br/>Lighthouse<br/>COS<br/>CAM <br/>CDB <br/>DNSPod | |
13 | | -| Huawei Cloud | cloudlist<br/>backdoor-user | ECS <br/>OBS <br/>IAM <br/>RDS | |
14 | | -| Microsoft Azure | cloudlist | Virtual Machines<br/>Blob Storage | |
15 | | -| AWS | cloudlist<br/>backdoor-user<br/>bucket-dump | EC2<br/>S3 <br/>IAM | |
16 | | -| GCP | cloudlist | Compute Engine<br/>Cloud DNS<br/>IAM | |
17 | | -| Volcengine | cloudlist | ECS<br/>IAM | |
18 | | -| JDCloud | cloudlist | VM<br/>IAM<br/>OSS | |
19 | | - |
20 | | -## Thanks |
| 1 | +# CloudToolKit |
| 2 | + |
| 3 | +Interactive multi-cloud security assessment framework. |
| 4 | + |
| 5 | +## Features |
| 6 | + |
| 7 | +- **Multi-Cloud Support** - Alibaba, Tencent, Huawei, AWS, Azure, GCP, Volcengine, JDCloud |
| 8 | +- **Asset Enumeration** - Hosts, databases, storage buckets, domains, IAM users |
| 9 | +- **Security Testing** - Backdoor user creation, command execution, bucket dumping |
| 10 | +- **Interactive CLI** - Tab completion, session management, credential caching |
| 11 | + |
| 12 | +## Quick Start |
| 13 | + |
| 14 | +```bash |
| 15 | +# Download from releases or build from source |
| 16 | +go build --ldflags "-s -w" -trimpath -o ctk cmd/main.go |
| 17 | + |
| 18 | +# Run interactive console |
| 19 | +./ctk |
| 20 | +``` |
| 21 | + |
| 22 | +## Supported Capabilities |
| 23 | + |
| 24 | +| Provider | Enumeration | Security Testing | |
| 25 | +|:--------:|:-----------:|:----------------:| |
| 26 | +| Alibaba Cloud | ECS, OSS, RAM, RDS, DNS, SLS, SMS | backdoor-user, bucket-dump, exec-command, event-dump, database-account | |
| 27 | +| Tencent Cloud | CVM, Lighthouse, COS, CAM, CDB, DNSPod | backdoor-user, exec-command | |
| 28 | +| Huawei Cloud | ECS, OBS, IAM, RDS | backdoor-user | |
| 29 | +| AWS | EC2, S3, IAM | backdoor-user, bucket-dump | |
| 30 | +| Azure | Virtual Machines, Blob Storage | - | |
| 31 | +| GCP | Compute Engine, Cloud DNS, IAM | - | |
| 32 | +| Volcengine | ECS, IAM | - | |
| 33 | +| JDCloud | VM, IAM, OSS | - | |
| 34 | + |
| 35 | +## Documentation |
| 36 | + |
| 37 | +See [Wiki](https://github.com/404tk/cloudtoolkit/wiki) for detailed usage. |
| 38 | + |
| 39 | +## Acknowledgements |
| 40 | + |
21 | 41 | - [c-bata/go-prompt](https://github.com/c-bata/go-prompt) |
22 | 42 | - [projectdiscovery/cloudlist](https://github.com/projectdiscovery/cloudlist) |
23 | 43 | - [rapid7/metasploit-framework](https://github.com/rapid7/metasploit-framework) |
0 commit comments