README
¶
CloudToolKit
Interactive multi-cloud security assessment framework.
Features
- Multi-Cloud Support - Alibaba, Tencent, Huawei, AWS, Azure, GCP, Volcengine, JDCloud
- Asset Enumeration - Hosts, databases, storage buckets, domains, IAM users
- Security Testing - Backdoor user creation, command execution, bucket dumping
- Interactive CLI - Tab completion, session management, credential caching
Quick Start
# Download from releases or build from source
go build --ldflags "-s -w" -trimpath -o ctk cmd/main.go
# Run interactive console
./ctk
Supported Capabilities
| Provider | Enumeration | Security Testing |
|---|---|---|
| Alibaba Cloud | ECS, OSS, RAM, RDS, DNS, SLS, SMS | backdoor-user, bucket-dump, exec-command, event-dump, database-account |
| Tencent Cloud | CVM, Lighthouse, COS, CAM, CDB, DNSPod | backdoor-user, exec-command |
| Huawei Cloud | ECS, OBS, IAM, RDS | backdoor-user |
| AWS | EC2, S3, IAM | backdoor-user, bucket-dump |
| Azure | Virtual Machines, Blob Storage | - |
| GCP | Compute Engine, Cloud DNS, IAM | - |
| Volcengine | ECS, IAM | - |
| JDCloud | VM, IAM, OSS | - |
Documentation
See Wiki for detailed usage.
Acknowledgements
Directories
¶
| Path | Synopsis |
|---|---|
|
pkg
|
|
|
providers/huawei/endpoint
Package endpoint builds Huawei Cloud service endpoint URLs without going through the official SDK's region.ValueOf() lookup.
|
Package endpoint builds Huawei Cloud service endpoint URLs without going through the official SDK's region.ValueOf() lookup. |
|
runtime/paginate
Package paginate provides a thin generic skeleton for SDK pagination loops.
|
Package paginate provides a thin generic skeleton for SDK pagination loops. |
|
runtime/regionrun
Package regionrun runs per-region enumeration callbacks in parallel with a bounded concurrency.
|
Package regionrun runs per-region enumeration callbacks in parallel with a bounded concurrency. |
|
argparse
Package argparse splits payload metadata strings into tokens with shell-style quoting so values containing spaces (passwords, etc.) survive intact.
|
Package argparse splits payload metadata strings into tokens with shell-style quoting so values containing spaces (passwords, etc.) survive intact. |
Click to show internal directories.
Click to hide internal directories.