https://github.com/mrknow001/aliyun-accesskey-Tools

阿里云accesskey利用工具
https://github.com/mrknow001/aliyun-accesskey-Tools

Last synced: 5 months ago
JSON representation

阿里云accesskey利用工具

• Host: GitHub
• URL: https://github.com/mrknow001/aliyun-accesskey-Tools
• Owner: mrknow001
• Created: 2020-12-20T15:01:55.000Z (over 4 years ago)
• Default Branch: main
• Last Pushed: 2022-04-08T08:17:32.000Z (about 3 years ago)
• Last Synced: 2024-08-03T18:16:44.147Z (9 months ago)
• Language: Python
• Homepage:
• Size: 649 KB
• Stars: 1,101
• Watchers: 13
• Forks: 171
• Open Issues: 10
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-cloud-security - 地址 - accesskey-Tools) `由「半人间丶」师傅补充，感谢支持` (0x02 工具 :hammer_and_wrench: / 1 云服务工具)
• awesome-hacking-lists - mrknow001/aliyun-accesskey-Tools - 阿里云accesskey利用工具 (Python)

README

        
# aliyun-accesskey-Tools

此工具用于查询ALIYUN_ACCESSKEY的主机，并且远程执行命令。

对于ALIYUN_ACCESSKEY利用方式可参考文章：[记一次阿里云主机泄露Access Key到Getshell](https://www.freebuf.com/articles/web/255717.html)

## 工具截图 ##

![image](https://github.com/mrknow001/aliyun-accesskey-Tools/blob/main/images/image1.png)

![image](https://github.com/mrknow001/aliyun-accesskey-Tools/blob/main/images/image2.png)

1.3版本

![image](https://github.com/mrknow001/aliyun-accesskey-Tools/blob/main/images/1.3版本.png)

![image](https://github.com/mrknow001/aliyun-accesskey-Tools/blob/main/images/command_excute.png)

## 安装模块 ##

pip install -r requirements.txt

pyinstaller打包exe命令

pyinstaller --hidden-import=queue -w -F OSSTools.py

由于时间关系，没空写了。策略方面还未完成。