cloudtoolkit

Cloud Penetration Testing Toolkit

Usage

Reference Wiki

Capability overview

Provider	Payload	Supported
Alibaba Cloud	cloudlist backdoor-user bucket-dump event-dump exec-command database-account	ECS (Elastic Compute Service) OSS (Object Storage Service) RAM (Resource Access Management) RDS (Relational Database Service) SMS (Short Message Service) AliDNS SLS (Simple Log Service)
Tencent Cloud	cloudlist backdoor-user exec-command	CVM (Cloud Virtual Machine) Lighthouse COS (Cloud Object Storage) CAM (Cloud Access Management) CDB (Cloud DataBase) DNSPod
Huawei Cloud	cloudlist backdoor-user	ECS (Elastic Cloud Server) OBS (Object Storage Service) IAM (Identity and Access Management) RDS (Relational Database Service)
Microsoft Azure	cloudlist	Virtual Machines Blob Storage
AWS (Amazon web services)	cloudlist backdoor-user bucket-dump	EC2 (Elastic Compute Cloud) S3 (Simple Storage Service) IAM (Identity and Access Management)
GCP (Google Cloud Platform)	cloudlist	Compute Engine Cloud DNS Identity and Access Management
Volcengine	cloudlist	ECS IAM

Thanks

• c-bata/go-prompt
• projectdiscovery/cloudlist
• rapid7/metasploit-framework