https://github.com/404tk/cloudtoolkit
Cloud Penetration Testing Toolkit
https://github.com/404tk/cloudtoolkit
accesskey aliyun aws cloud huaweicloud pentesting
Last synced: 5 months ago
JSON representation
Cloud Penetration Testing Toolkit
- Host: GitHub
- URL: https://github.com/404tk/cloudtoolkit
- Owner: 404tk
- License: mit
- Created: 2022-05-30T09:41:38.000Z (about 4 years ago)
- Default Branch: main
- Last Pushed: 2025-07-24T08:40:10.000Z (11 months ago)
- Last Synced: 2025-07-24T12:07:54.004Z (11 months ago)
- Topics: accesskey, aliyun, aws, cloud, huaweicloud, pentesting
- Language: Go
- Homepage:
- Size: 466 KB
- Stars: 103
- Watchers: 6
- Forks: 12
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# CloudToolKit
Interactive multi-cloud security assessment framework.
## Features
- **Multi-Cloud Support** - Alibaba, Tencent, Huawei, AWS, Azure, GCP, Volcengine, JDCloud
- **Asset Enumeration** - Hosts, databases, storage buckets, domains, IAM users
- **Security Testing** - Backdoor user creation, command execution, bucket dumping
- **Interactive CLI** - Tab completion, session management, credential caching
## Quick Start
```bash
# Download from releases or build from source
go build --ldflags "-s -w" -trimpath -o ctk cmd/main.go
# Run interactive console
./ctk
```
## Supported Capabilities
| Provider | Enumeration | Security Testing |
|:--------:|:-----------:|:----------------:|
| Alibaba Cloud | ECS, OSS, RAM, RDS, DNS, SLS, SMS | backdoor-user, bucket-dump, exec-command, event-dump, database-account |
| Tencent Cloud | CVM, Lighthouse, COS, CAM, CDB, DNSPod | backdoor-user, exec-command |
| Huawei Cloud | ECS, OBS, IAM, RDS | backdoor-user |
| AWS | EC2, S3, IAM | backdoor-user, bucket-dump |
| Azure | Virtual Machines, Blob Storage | - |
| GCP | Compute Engine, Cloud DNS, IAM | - |
| Volcengine | ECS, IAM | - |
| JDCloud | VM, IAM, OSS | - |
## Documentation
See [Wiki](https://github.com/404tk/cloudtoolkit/wiki) for detailed usage.
## Acknowledgements
- [c-bata/go-prompt](https://github.com/c-bata/go-prompt)
- [projectdiscovery/cloudlist](https://github.com/projectdiscovery/cloudlist)
- [rapid7/metasploit-framework](https://github.com/rapid7/metasploit-framework)