cloudxpl 4.2.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (522) hide show
  1. cloudxpl/__init__.py +8 -0
  2. cloudxpl/__main__.py +188 -0
  3. cloudxpl/core/__init__.py +0 -0
  4. cloudxpl/core/credential.py +37 -0
  5. cloudxpl/core/dispatcher.py +575 -0
  6. cloudxpl/core/identity_resolver.py +192 -0
  7. cloudxpl/core/policy_engine.py +198 -0
  8. cloudxpl/core/shell_mixin.py +96 -0
  9. cloudxpl/core/shells/__init__.py +47 -0
  10. cloudxpl/modules/__init__.py +0 -0
  11. cloudxpl/modules/alibaba/__init__.py +0 -0
  12. cloudxpl/modules/alibaba/cloudtoolkit_bridge.py +40 -0
  13. cloudxpl/modules/alibaba/cve_2026_19339.py +40 -0
  14. cloudxpl/modules/alibaba/ecs_enum.py +40 -0
  15. cloudxpl/modules/alibaba/ecs_metadata.py +40 -0
  16. cloudxpl/modules/alibaba/oss_enum.py +40 -0
  17. cloudxpl/modules/alibaba/oss_exploit.py +40 -0
  18. cloudxpl/modules/alibaba/ram_enum.py +40 -0
  19. cloudxpl/modules/alibaba/rds_enum.py +40 -0
  20. cloudxpl/modules/aws/__init__.py +0 -0
  21. cloudxpl/modules/aws/cloudformation_exploit.py +61 -0
  22. cloudxpl/modules/aws/cloudtrail_disable.py +66 -0
  23. cloudxpl/modules/aws/cloudtrail_tamper.py +59 -0
  24. cloudxpl/modules/aws/codebuild_exploit.py +62 -0
  25. cloudxpl/modules/aws/codepipeline_exploit.py +62 -0
  26. cloudxpl/modules/aws/cognito_exploit.py +71 -0
  27. cloudxpl/modules/aws/cve_2024_28056.py +59 -0
  28. cloudxpl/modules/aws/cve_2026_5707.py +59 -0
  29. cloudxpl/modules/aws/cve_2026_5708.py +40 -0
  30. cloudxpl/modules/aws/cve_2026_5709.py +40 -0
  31. cloudxpl/modules/aws/dynamodb_enum.py +54 -0
  32. cloudxpl/modules/aws/ebs_snapshot.py +67 -0
  33. cloudxpl/modules/aws/ec2_enum.py +69 -0
  34. cloudxpl/modules/aws/ec2_imds_pivot.py +86 -0
  35. cloudxpl/modules/aws/ec2_ssm.py +64 -0
  36. cloudxpl/modules/aws/ec2_userdata.py +70 -0
  37. cloudxpl/modules/aws/ecr_enum.py +64 -0
  38. cloudxpl/modules/aws/ecs_exploit.py +77 -0
  39. cloudxpl/modules/aws/eks_enum.py +67 -0
  40. cloudxpl/modules/aws/eks_exploit.py +66 -0
  41. cloudxpl/modules/aws/eventbridge_exploit.py +65 -0
  42. cloudxpl/modules/aws/glue_exploit.py +63 -0
  43. cloudxpl/modules/aws/guardduty_bypass.py +71 -0
  44. cloudxpl/modules/aws/iam_enum.py +101 -0
  45. cloudxpl/modules/aws/iam_privesc.py +92 -0
  46. cloudxpl/modules/aws/lambda_enum.py +85 -0
  47. cloudxpl/modules/aws/lambda_inject.py +79 -0
  48. cloudxpl/modules/aws/lambda_persist.py +69 -0
  49. cloudxpl/modules/aws/org_enum.py +58 -0
  50. cloudxpl/modules/aws/pacu_bridge.py +45 -0
  51. cloudxpl/modules/aws/rds_enum.py +64 -0
  52. cloudxpl/modules/aws/rds_exploit.py +57 -0
  53. cloudxpl/modules/aws/route53_takeover.py +63 -0
  54. cloudxpl/modules/aws/s3_enum.py +96 -0
  55. cloudxpl/modules/aws/s3_exfil.py +60 -0
  56. cloudxpl/modules/aws/s3_exploit.py +85 -0
  57. cloudxpl/modules/aws/secrets_manager.py +62 -0
  58. cloudxpl/modules/aws/sns_exploit.py +66 -0
  59. cloudxpl/modules/aws/sqs_exploit.py +62 -0
  60. cloudxpl/modules/aws/ssm_param_store.py +69 -0
  61. cloudxpl/modules/aws/sso_enum.py +63 -0
  62. cloudxpl/modules/aws/ssrf_imds.py +97 -0
  63. cloudxpl/modules/aws/stepfunctions_exploit.py +57 -0
  64. cloudxpl/modules/aws/sts_enum.py +70 -0
  65. cloudxpl/modules/aws/vpc_enum.py +66 -0
  66. cloudxpl/modules/azure/__init__.py +0 -0
  67. cloudxpl/modules/azure/aks_enum.py +85 -0
  68. cloudxpl/modules/azure/aks_exploit.py +85 -0
  69. cloudxpl/modules/azure/app_service_exploit.py +85 -0
  70. cloudxpl/modules/azure/arm_injection.py +144 -0
  71. cloudxpl/modules/azure/automation_exploit.py +85 -0
  72. cloudxpl/modules/azure/azure_functions_escape.py +29 -0
  73. cloudxpl/modules/azure/azurehound_bridge.py +85 -0
  74. cloudxpl/modules/azure/azurescape.py +41 -0
  75. cloudxpl/modules/azure/azurescape_bridge.py +29 -0
  76. cloudxpl/modules/azure/blob_exfil.py +85 -0
  77. cloudxpl/modules/azure/blob_exploit.py +85 -0
  78. cloudxpl/modules/azure/conditional_access.py +85 -0
  79. cloudxpl/modules/azure/cosmosdb_exploit.py +85 -0
  80. cloudxpl/modules/azure/cve_2024_50603.py +85 -0
  81. cloudxpl/modules/azure/cve_2025_29813.py +85 -0
  82. cloudxpl/modules/azure/cve_2025_29827.py +85 -0
  83. cloudxpl/modules/azure/cve_2025_29972.py +85 -0
  84. cloudxpl/modules/azure/cve_2025_53767.py +85 -0
  85. cloudxpl/modules/azure/cve_2026_20965.py +41 -0
  86. cloudxpl/modules/azure/defender_bypass.py +85 -0
  87. cloudxpl/modules/azure/devops_exploit.py +85 -0
  88. cloudxpl/modules/azure/entra_consent.py +85 -0
  89. cloudxpl/modules/azure/entra_enum.py +85 -0
  90. cloudxpl/modules/azure/entra_privesc.py +85 -0
  91. cloudxpl/modules/azure/entra_tokens.py +85 -0
  92. cloudxpl/modules/azure/fabricscape.py +41 -0
  93. cloudxpl/modules/azure/fabricscape_cve_2022_30137.py +30 -0
  94. cloudxpl/modules/azure/function_exploit.py +85 -0
  95. cloudxpl/modules/azure/function_persist.py +85 -0
  96. cloudxpl/modules/azure/functions_escape.py +41 -0
  97. cloudxpl/modules/azure/graph_api_abuse.py +85 -0
  98. cloudxpl/modules/azure/keyvault_exploit.py +85 -0
  99. cloudxpl/modules/azure/logic_apps_exploit.py +85 -0
  100. cloudxpl/modules/azure/managed_identity.py +115 -0
  101. cloudxpl/modules/azure/nsg_enum.py +85 -0
  102. cloudxpl/modules/azure/pim_abuse.py +85 -0
  103. cloudxpl/modules/azure/rbac_enum.py +85 -0
  104. cloudxpl/modules/azure/rbac_exploit.py +85 -0
  105. cloudxpl/modules/azure/resource_group_enum.py +85 -0
  106. cloudxpl/modules/azure/sentinel_bypass.py +85 -0
  107. cloudxpl/modules/azure/service_principal.py +85 -0
  108. cloudxpl/modules/azure/sql_enum.py +85 -0
  109. cloudxpl/modules/azure/sql_exploit.py +85 -0
  110. cloudxpl/modules/azure/storage_enum.py +94 -0
  111. cloudxpl/modules/azure/stormspotter_bridge.py +85 -0
  112. cloudxpl/modules/azure/subscription_enum.py +72 -0
  113. cloudxpl/modules/azure/vm_enum.py +85 -0
  114. cloudxpl/modules/azure/vm_exploit.py +85 -0
  115. cloudxpl/modules/azure/vm_imds.py +85 -0
  116. cloudxpl/modules/cicd/__init__.py +0 -0
  117. cloudxpl/modules/cicd/cicd_secret_dump.py +22 -0
  118. cloudxpl/modules/cicd/circleci_runner_escape.py +22 -0
  119. cloudxpl/modules/cicd/gha_runner_escape.py +22 -0
  120. cloudxpl/modules/cicd/gha_supply_chain.py +22 -0
  121. cloudxpl/modules/cicd/gitlab_ci_rce.py +22 -0
  122. cloudxpl/modules/cicd/gitlab_runner_hijack.py +22 -0
  123. cloudxpl/modules/cicd/jenkins_agent_abuse.py +22 -0
  124. cloudxpl/modules/cicd/jenkins_plugin_privesc.py +22 -0
  125. cloudxpl/modules/cicd/terraform_agent_abuse.py +22 -0
  126. cloudxpl/modules/cicd/terraform_token_leak.py +22 -0
  127. cloudxpl/modules/cred/__init__.py +0 -0
  128. cloudxpl/modules/cred/config_file_scan.py +85 -0
  129. cloudxpl/modules/cred/credential_report.py +85 -0
  130. cloudxpl/modules/cred/env_var_scan.py +85 -0
  131. cloudxpl/modules/cred/federation_abuse.py +85 -0
  132. cloudxpl/modules/cred/key_rotation_check.py +85 -0
  133. cloudxpl/modules/cred/leaked_key_exploit.py +85 -0
  134. cloudxpl/modules/cred/metadata_harvest.py +85 -0
  135. cloudxpl/modules/cred/mfa_relay.py +40 -0
  136. cloudxpl/modules/cred/oauth_token_theft.py +85 -0
  137. cloudxpl/modules/cred/rsa_netwitness_exploit.py +40 -0
  138. cloudxpl/modules/cred/rsa_securid_enum.py +40 -0
  139. cloudxpl/modules/cred/seed_theft_check.py +40 -0
  140. cloudxpl/modules/cred/temp_cred_extend.py +85 -0
  141. cloudxpl/modules/cred/token_lifetime_abuse.py +85 -0
  142. cloudxpl/modules/digitalocean/__init__.py +0 -0
  143. cloudxpl/modules/digitalocean/api_token_abuse.py +40 -0
  144. cloudxpl/modules/digitalocean/doks_enum.py +40 -0
  145. cloudxpl/modules/digitalocean/droplet_agent_rce.py +40 -0
  146. cloudxpl/modules/digitalocean/droplet_enum.py +40 -0
  147. cloudxpl/modules/digitalocean/firewall_enum.py +40 -0
  148. cloudxpl/modules/digitalocean/metadata_ssrf.py +40 -0
  149. cloudxpl/modules/digitalocean/spaces_enum.py +40 -0
  150. cloudxpl/modules/digitalocean/spaces_exploit.py +40 -0
  151. cloudxpl/modules/gcp/__init__.py +0 -0
  152. cloudxpl/modules/gcp/artifact_registry.py +85 -0
  153. cloudxpl/modules/gcp/bigquery_exploit.py +85 -0
  154. cloudxpl/modules/gcp/bucket_enum.py +84 -0
  155. cloudxpl/modules/gcp/bucket_exfil.py +85 -0
  156. cloudxpl/modules/gcp/bucket_exploit.py +85 -0
  157. cloudxpl/modules/gcp/cloud_armor_bypass.py +40 -0
  158. cloudxpl/modules/gcp/cloudbuild_exploit.py +85 -0
  159. cloudxpl/modules/gcp/cloudbuild_supply_chain.py +40 -0
  160. cloudxpl/modules/gcp/cloudfunctions_exploit.py +85 -0
  161. cloudxpl/modules/gcp/cloudfunctions_persist.py +85 -0
  162. cloudxpl/modules/gcp/cloudrun_exploit.py +85 -0
  163. cloudxpl/modules/gcp/cloudsql_enum.py +85 -0
  164. cloudxpl/modules/gcp/cloudsql_exploit.py +85 -0
  165. cloudxpl/modules/gcp/composer_exploit.py +85 -0
  166. cloudxpl/modules/gcp/compute_enum.py +85 -0
  167. cloudxpl/modules/gcp/compute_exploit.py +85 -0
  168. cloudxpl/modules/gcp/compute_imds.py +85 -0
  169. cloudxpl/modules/gcp/cve_2025_51591.py +85 -0
  170. cloudxpl/modules/gcp/cve_2026_2031.py +85 -0
  171. cloudxpl/modules/gcp/cve_2026_2264.py +85 -0
  172. cloudxpl/modules/gcp/cve_2026_31431.py +40 -0
  173. cloudxpl/modules/gcp/cve_2026_46300.py +40 -0
  174. cloudxpl/modules/gcp/cve_2026_81867.py +85 -0
  175. cloudxpl/modules/gcp/dataflow_exploit.py +85 -0
  176. cloudxpl/modules/gcp/dns_takeover.py +85 -0
  177. cloudxpl/modules/gcp/gcpbucketbrute_bridge.py +85 -0
  178. cloudxpl/modules/gcp/gke_autopilot_escape.py +40 -0
  179. cloudxpl/modules/gcp/gke_enum.py +85 -0
  180. cloudxpl/modules/gcp/gke_exploit.py +85 -0
  181. cloudxpl/modules/gcp/iam_privesc.py +85 -0
  182. cloudxpl/modules/gcp/iap_bypass.py +40 -0
  183. cloudxpl/modules/gcp/imagerunner_exploit.py +40 -0
  184. cloudxpl/modules/gcp/kms_exploit.py +85 -0
  185. cloudxpl/modules/gcp/logging_bypass.py +85 -0
  186. cloudxpl/modules/gcp/metadata_ssrf.py +94 -0
  187. cloudxpl/modules/gcp/org_policy_enum.py +85 -0
  188. cloudxpl/modules/gcp/project_enum.py +123 -0
  189. cloudxpl/modules/gcp/pubsub_exploit.py +85 -0
  190. cloudxpl/modules/gcp/sa_impersonate.py +85 -0
  191. cloudxpl/modules/gcp/sa_key_theft.py +85 -0
  192. cloudxpl/modules/gcp/secretmanager_exploit.py +85 -0
  193. cloudxpl/modules/gcp/service_account_enum.py +107 -0
  194. cloudxpl/modules/gcp/terraform_state.py +85 -0
  195. cloudxpl/modules/gcp/vpc_firewall_enum.py +85 -0
  196. cloudxpl/modules/gcp/wif_abuse.py +40 -0
  197. cloudxpl/modules/gcp/workload_identity.py +85 -0
  198. cloudxpl/modules/hetzner/__init__.py +0 -0
  199. cloudxpl/modules/hetzner/api_token_abuse.py +40 -0
  200. cloudxpl/modules/hetzner/firewall_enum.py +40 -0
  201. cloudxpl/modules/hetzner/floating_ip_hijack.py +40 -0
  202. cloudxpl/modules/hetzner/metadata_ssrf.py +40 -0
  203. cloudxpl/modules/hetzner/server_enum.py +40 -0
  204. cloudxpl/modules/ibm/__init__.py +0 -0
  205. cloudxpl/modules/ibm/cloudpak_exploit.py +40 -0
  206. cloudxpl/modules/ibm/cos_enum.py +40 -0
  207. cloudxpl/modules/ibm/cos_exploit.py +40 -0
  208. cloudxpl/modules/ibm/iam_enum.py +40 -0
  209. cloudxpl/modules/ibm/qradar_exploit.py +40 -0
  210. cloudxpl/modules/ibm/vpc_enum.py +40 -0
  211. cloudxpl/modules/k8s/__init__.py +0 -0
  212. cloudxpl/modules/k8s/admission_bypass.py +85 -0
  213. cloudxpl/modules/k8s/api_server_anon.py +85 -0
  214. cloudxpl/modules/k8s/cluster_enum.py +85 -0
  215. cloudxpl/modules/k8s/configmap_dump.py +85 -0
  216. cloudxpl/modules/k8s/container_cve_2026_52910.py +42 -0
  217. cloudxpl/modules/k8s/container_escape.py +85 -0
  218. cloudxpl/modules/k8s/crd_abuse.py +85 -0
  219. cloudxpl/modules/k8s/cve_2019_5736.py +40 -0
  220. cloudxpl/modules/k8s/cve_2021_30465.py +40 -0
  221. cloudxpl/modules/k8s/cve_2022_0492.py +40 -0
  222. cloudxpl/modules/k8s/cve_2022_0847.py +40 -0
  223. cloudxpl/modules/k8s/cve_2022_23648.py +40 -0
  224. cloudxpl/modules/k8s/cve_2024_0132.py +41 -0
  225. cloudxpl/modules/k8s/cve_2024_1753.py +41 -0
  226. cloudxpl/modules/k8s/cve_2024_21626.py +85 -0
  227. cloudxpl/modules/k8s/cve_2024_23651.py +41 -0
  228. cloudxpl/modules/k8s/cve_2024_23652.py +41 -0
  229. cloudxpl/modules/k8s/cve_2024_23653.py +41 -0
  230. cloudxpl/modules/k8s/cve_2025_23266.py +41 -0
  231. cloudxpl/modules/k8s/cve_2025_31133.py +85 -0
  232. cloudxpl/modules/k8s/cve_2025_52565.py +85 -0
  233. cloudxpl/modules/k8s/cve_2025_52881.py +85 -0
  234. cloudxpl/modules/k8s/etcd_exploit.py +85 -0
  235. cloudxpl/modules/k8s/helm_exploit.py +85 -0
  236. cloudxpl/modules/k8s/hostpath_mount.py +85 -0
  237. cloudxpl/modules/k8s/kube_hunter_bridge.py +85 -0
  238. cloudxpl/modules/k8s/kubelet_exploit.py +85 -0
  239. cloudxpl/modules/k8s/network_policy_bypass.py +85 -0
  240. cloudxpl/modules/k8s/node_proxy.py +85 -0
  241. cloudxpl/modules/k8s/peirates_bridge.py +85 -0
  242. cloudxpl/modules/k8s/pod_enum.py +85 -0
  243. cloudxpl/modules/k8s/pod_escape_cve.py +85 -0
  244. cloudxpl/modules/k8s/privileged_pod.py +85 -0
  245. cloudxpl/modules/k8s/rbac_enum.py +85 -0
  246. cloudxpl/modules/k8s/rbac_escalation.py +85 -0
  247. cloudxpl/modules/k8s/registry_exploit.py +85 -0
  248. cloudxpl/modules/k8s/runc_cve_2019_5736.py +41 -0
  249. cloudxpl/modules/k8s/runc_cve_2024_23651.py +30 -0
  250. cloudxpl/modules/k8s/runc_cve_2024_23652.py +30 -0
  251. cloudxpl/modules/k8s/runc_cve_2024_23653.py +30 -0
  252. cloudxpl/modules/k8s/sa_token_theft.py +85 -0
  253. cloudxpl/modules/k8s/secret_dump.py +85 -0
  254. cloudxpl/modules/k8s/service_mesh_exploit.py +85 -0
  255. cloudxpl/modules/k8s/sidecar_inject.py +85 -0
  256. cloudxpl/modules/multi/__init__.py +0 -0
  257. cloudxpl/modules/multi/ci_cd_exploit.py +85 -0
  258. cloudxpl/modules/multi/cloud_side_channel.py +41 -0
  259. cloudxpl/modules/multi/cloudfox_bridge.py +85 -0
  260. cloudxpl/modules/multi/cloudtoolkit_multi.py +40 -0
  261. cloudxpl/modules/multi/container_escape_collection_bridge.py +41 -0
  262. cloudxpl/modules/multi/cross_cloud_pivot.py +85 -0
  263. cloudxpl/modules/multi/docker_escape.py +85 -0
  264. cloudxpl/modules/multi/docker_socket.py +85 -0
  265. cloudxpl/modules/multi/firecracker_escape.py +41 -0
  266. cloudxpl/modules/multi/git_secret_scan.py +85 -0
  267. cloudxpl/modules/multi/github_actions_runner_exploit.py +29 -0
  268. cloudxpl/modules/multi/huawei_recon.py +40 -0
  269. cloudxpl/modules/multi/iac_secret_scan.py +85 -0
  270. cloudxpl/modules/multi/openstack_generic.py +40 -0
  271. cloudxpl/modules/multi/prowler_bridge.py +85 -0
  272. cloudxpl/modules/multi/scoutsuite_bridge.py +85 -0
  273. cloudxpl/modules/multi/steampipe_bridge.py +85 -0
  274. cloudxpl/modules/multi/terraform_plan_inject.py +85 -0
  275. cloudxpl/modules/multi/terraform_state_exploit.py +85 -0
  276. cloudxpl/modules/net/__init__.py +0 -0
  277. cloudxpl/modules/net/dns_takeover.py +85 -0
  278. cloudxpl/modules/net/exposed_services.py +85 -0
  279. cloudxpl/modules/net/load_balancer_enum.py +85 -0
  280. cloudxpl/modules/net/peering_abuse.py +85 -0
  281. cloudxpl/modules/net/privatelink_abuse.py +85 -0
  282. cloudxpl/modules/net/sg_analysis.py +85 -0
  283. cloudxpl/modules/net/vpc_enum.py +85 -0
  284. cloudxpl/modules/net/vpn_exploit.py +85 -0
  285. cloudxpl/modules/oci/__init__.py +0 -0
  286. cloudxpl/modules/oci/audit_bypass.py +40 -0
  287. cloudxpl/modules/oci/bucket_enum.py +40 -0
  288. cloudxpl/modules/oci/bucket_exploit.py +40 -0
  289. cloudxpl/modules/oci/compute_enum.py +40 -0
  290. cloudxpl/modules/oci/cve_2025_61882.py +40 -0
  291. cloudxpl/modules/oci/cve_2026_21962.py +40 -0
  292. cloudxpl/modules/oci/iam_enum.py +40 -0
  293. cloudxpl/modules/oci/metadata_ssrf.py +40 -0
  294. cloudxpl/modules/oci/ocinfernobridge.py +40 -0
  295. cloudxpl/modules/oci/volume_attach.py +40 -0
  296. cloudxpl/modules/ovh/__init__.py +0 -0
  297. cloudxpl/modules/ovh/api_abuse.py +40 -0
  298. cloudxpl/modules/ovh/bare_metal_ipmi.py +40 -0
  299. cloudxpl/modules/ovh/email_spoof.py +40 -0
  300. cloudxpl/modules/ovh/openstack_enum.py +40 -0
  301. cloudxpl/modules/ovh/swift_exploit.py +40 -0
  302. cloudxpl/modules/ovh/vrack_lateral.py +40 -0
  303. cloudxpl/modules/paas/__init__.py +0 -0
  304. cloudxpl/modules/paas/aci_azurescape.py +22 -0
  305. cloudxpl/modules/paas/appservice_sandbox_escape.py +22 -0
  306. cloudxpl/modules/paas/beanstalk_escape.py +22 -0
  307. cloudxpl/modules/paas/cloudrun_runc_escape.py +22 -0
  308. cloudxpl/modules/paas/fargate_firecracker.py +22 -0
  309. cloudxpl/modules/paas/gcp_appint_sandbox.py +22 -0
  310. cloudxpl/modules/paas/heroku_dyno_recon.py +22 -0
  311. cloudxpl/modules/paas/lambda_tmp_persist.py +22 -0
  312. cloudxpl/modules/paas/paas_metadata_pivot.py +22 -0
  313. cloudxpl/modules/paas/railway_escape.py +22 -0
  314. cloudxpl/modules/serverless/__init__.py +0 -0
  315. cloudxpl/modules/serverless/api_gateway_bypass.py +85 -0
  316. cloudxpl/modules/serverless/cold_start_abuse.py +85 -0
  317. cloudxpl/modules/serverless/concurrency_abuse.py +85 -0
  318. cloudxpl/modules/serverless/env_extraction.py +85 -0
  319. cloudxpl/modules/serverless/event_injection.py +85 -0
  320. cloudxpl/modules/serverless/iam_role_chain.py +85 -0
  321. cloudxpl/modules/serverless/layer_poisoning.py +85 -0
  322. cloudxpl/modules/serverless/log_injection.py +85 -0
  323. cloudxpl/modules/serverless/reverse_shell.py +85 -0
  324. cloudxpl/modules/serverless/runtime_rce.py +85 -0
  325. cloudxpl/modules/serverless/step_function_abuse.py +85 -0
  326. cloudxpl/modules/serverless/tmp_persistence.py +85 -0
  327. cloudxpl/modules/serverless/trigger_hijack.py +85 -0
  328. cloudxpl/modules/serverless/vpc_pivot.py +85 -0
  329. cloudxpl/modules/storage/__init__.py +0 -0
  330. cloudxpl/modules/storage/acl_check.py +85 -0
  331. cloudxpl/modules/storage/bucket_bruteforce.py +85 -0
  332. cloudxpl/modules/storage/bucket_finder.py +85 -0
  333. cloudxpl/modules/storage/bucketloot_bridge.py +85 -0
  334. cloudxpl/modules/storage/cors_exploit.py +85 -0
  335. cloudxpl/modules/storage/download_mass.py +85 -0
  336. cloudxpl/modules/storage/grayhat_search.py +85 -0
  337. cloudxpl/modules/storage/policy_abuse.py +85 -0
  338. cloudxpl/modules/storage/presigned_abuse.py +85 -0
  339. cloudxpl/modules/storage/public_objects.py +85 -0
  340. cloudxpl/modules/storage/ransomware_sim.py +85 -0
  341. cloudxpl/modules/storage/s3scanner_bridge.py +85 -0
  342. cloudxpl/modules/storage/static_site_takeover.py +85 -0
  343. cloudxpl/modules/storage/upload_exploit.py +85 -0
  344. cloudxpl/modules/storage/versioning_exploit.py +85 -0
  345. cloudxpl/modules/tencent/__init__.py +0 -0
  346. cloudxpl/modules/tencent/cam_enum.py +40 -0
  347. cloudxpl/modules/tencent/cloudtoolkit_bridge.py +40 -0
  348. cloudxpl/modules/tencent/cos_enum.py +40 -0
  349. cloudxpl/modules/tencent/cos_exploit.py +40 -0
  350. cloudxpl/modules/tencent/cve_2026_30859.py +40 -0
  351. cloudxpl/modules/tencent/cvm_metadata.py +40 -0
  352. cloudxpl/modules/vdi/__init__.py +0 -0
  353. cloudxpl/modules/vdi/avd_privesc.py +22 -0
  354. cloudxpl/modules/vdi/citrix_session_recording_rce.py +22 -0
  355. cloudxpl/modules/vdi/citrix_vda_lpe.py +22 -0
  356. cloudxpl/modules/vdi/citrix_vdi_cve_2025_6759.py +30 -0
  357. cloudxpl/modules/vdi/horizon_escape.py +22 -0
  358. cloudxpl/modules/vdi/vdi_breakout_clipboard.py +22 -0
  359. cloudxpl/modules/vdi/vdi_breakout_dialog.py +22 -0
  360. cloudxpl/modules/vdi/vdi_breakout_drive.py +22 -0
  361. cloudxpl/modules/vdi/vdi_breakout_print.py +22 -0
  362. cloudxpl/modules/vdi/vdi_breakout_usb.py +22 -0
  363. cloudxpl/modules/vdi/vdi_kiosk_escape.py +22 -0
  364. cloudxpl/modules/vdi/workspaces_lpe.py +22 -0
  365. cloudxpl/modules/virt/__init__.py +0 -0
  366. cloudxpl/modules/virt/amd_microcode_cve_2024_56161.py +30 -0
  367. cloudxpl/modules/virt/awesome_hyperv_bridge.py +33 -0
  368. cloudxpl/modules/virt/awesome_vm_exploit_bridge.py +33 -0
  369. cloudxpl/modules/virt/citrix_cve_2026_53562.py +30 -0
  370. cloudxpl/modules/virt/citrix_escape.py +40 -0
  371. cloudxpl/modules/virt/citrix_vapd_exploit.py +34 -0
  372. cloudxpl/modules/virt/citrix_vdi_cve_2025_6759.py +30 -0
  373. cloudxpl/modules/virt/citrix_xsa_486.py +40 -0
  374. cloudxpl/modules/virt/container_cve_2026_80521.py +42 -0
  375. cloudxpl/modules/virt/container_escape_collection_bridge.py +33 -0
  376. cloudxpl/modules/virt/cve_2019_5544.py +40 -0
  377. cloudxpl/modules/virt/cve_2020_3952.py +40 -0
  378. cloudxpl/modules/virt/cve_2020_3992.py +40 -0
  379. cloudxpl/modules/virt/cve_2021_21972.py +40 -0
  380. cloudxpl/modules/virt/cve_2021_21974.py +40 -0
  381. cloudxpl/modules/virt/cve_2021_21985.py +40 -0
  382. cloudxpl/modules/virt/cve_2021_22005.py +40 -0
  383. cloudxpl/modules/virt/cve_2022_22954.py +40 -0
  384. cloudxpl/modules/virt/cve_2022_31705.py +40 -0
  385. cloudxpl/modules/virt/cve_2023_20867.py +40 -0
  386. cloudxpl/modules/virt/cve_2023_34048.py +40 -0
  387. cloudxpl/modules/virt/cve_2024_37085.py +40 -0
  388. cloudxpl/modules/virt/cve_2025_22225.py +40 -0
  389. cloudxpl/modules/virt/cve_2025_22226.py +40 -0
  390. cloudxpl/modules/virt/esxi_brute_bridge.py +33 -0
  391. cloudxpl/modules/virt/esxi_cve_2019_5544.py +30 -0
  392. cloudxpl/modules/virt/esxi_cve_2020_3992.py +30 -0
  393. cloudxpl/modules/virt/esxi_cve_2021_21974.py +30 -0
  394. cloudxpl/modules/virt/esxi_cve_2024_22252.py +41 -0
  395. cloudxpl/modules/virt/esxi_cve_2024_22253.py +41 -0
  396. cloudxpl/modules/virt/esxi_cve_2024_22254.py +41 -0
  397. cloudxpl/modules/virt/esxi_cve_2024_22255.py +41 -0
  398. cloudxpl/modules/virt/esxi_cve_2024_37085.py +30 -0
  399. cloudxpl/modules/virt/esxi_cve_2025_22224.py +40 -0
  400. cloudxpl/modules/virt/esxi_cve_2026_47876.py +30 -0
  401. cloudxpl/modules/virt/esxi_enum.py +40 -0
  402. cloudxpl/modules/virt/esxi_fingerprint_bridge.py +33 -0
  403. cloudxpl/modules/virt/esxi_log4shell.py +41 -0
  404. cloudxpl/modules/virt/esxi_ransomware.py +40 -0
  405. cloudxpl/modules/virt/esxi_ssh_exploit.py +40 -0
  406. cloudxpl/modules/virt/esxi_vm_escape.py +40 -0
  407. cloudxpl/modules/virt/firecracker_cve_2026_1386.py +30 -0
  408. cloudxpl/modules/virt/firecracker_cve_2026_5747.py +30 -0
  409. cloudxpl/modules/virt/firecracker_escape.py +40 -0
  410. cloudxpl/modules/virt/horizon_log4shell.py +30 -0
  411. cloudxpl/modules/virt/hyperv_cve_2019_0887.py +30 -0
  412. cloudxpl/modules/virt/hyperv_cve_2021_28476.py +40 -0
  413. cloudxpl/modules/virt/hyperv_cve_2021_34450.py +30 -0
  414. cloudxpl/modules/virt/hyperv_cve_2022_21995.py +30 -0
  415. cloudxpl/modules/virt/hyperv_cve_2022_30163.py +30 -0
  416. cloudxpl/modules/virt/hyperv_cve_2024_20700.py +41 -0
  417. cloudxpl/modules/virt/hyperv_cve_2024_21407.py +40 -0
  418. cloudxpl/modules/virt/hyperv_cve_2024_38080.py +41 -0
  419. cloudxpl/modules/virt/hyperv_cve_2024_49117.py +30 -0
  420. cloudxpl/modules/virt/hyperv_cve_2025_21333.py +41 -0
  421. cloudxpl/modules/virt/hyperv_cve_2025_21334.py +41 -0
  422. cloudxpl/modules/virt/hyperv_cve_2025_21335.py +41 -0
  423. cloudxpl/modules/virt/hyperv_cve_2026_40402.py +40 -0
  424. cloudxpl/modules/virt/hyperv_cve_2026_45607.py +30 -0
  425. cloudxpl/modules/virt/hyperv_cve_2026_45641.py +41 -0
  426. cloudxpl/modules/virt/hyperv_cve_2026_57092.py +41 -0
  427. cloudxpl/modules/virt/hyperv_cve_2026_69603.py +41 -0
  428. cloudxpl/modules/virt/hyperv_cve_2026_72961.py +41 -0
  429. cloudxpl/modules/virt/hyperv_cve_2026_80083.py +41 -0
  430. cloudxpl/modules/virt/hyperv_cve_2026_89927.py +41 -0
  431. cloudxpl/modules/virt/hyperv_enum.py +40 -0
  432. cloudxpl/modules/virt/hyperv_escape.py +40 -0
  433. cloudxpl/modules/virt/hyperv_remotefx.py +40 -0
  434. cloudxpl/modules/virt/hypervisor_resources_bridge.py +41 -0
  435. cloudxpl/modules/virt/intel_tdx_enum.py +29 -0
  436. cloudxpl/modules/virt/kata_cve_2026_24834.py +30 -0
  437. cloudxpl/modules/virt/kata_escape.py +40 -0
  438. cloudxpl/modules/virt/kvm_arm64_escape.py +40 -0
  439. cloudxpl/modules/virt/kvm_cve_2019_14835.py +40 -0
  440. cloudxpl/modules/virt/kvm_cve_2019_18389.py +40 -0
  441. cloudxpl/modules/virt/kvm_cve_2026_3842.py +41 -0
  442. cloudxpl/modules/virt/kvm_cve_2026_64561.py +41 -0
  443. cloudxpl/modules/virt/kvm_cve_2026_99999.py +41 -0
  444. cloudxpl/modules/virt/kvm_januscape.py +40 -0
  445. cloudxpl/modules/virt/libvirt_enum.py +40 -0
  446. cloudxpl/modules/virt/lolesxi_bridge.py +33 -0
  447. cloudxpl/modules/virt/msf_vmware_bridge.py +40 -0
  448. cloudxpl/modules/virt/nitro_sidechannel.py +29 -0
  449. cloudxpl/modules/virt/nutanix_cve_2018_7750.py +30 -0
  450. cloudxpl/modules/virt/nutanix_cve_2026_84731.py +30 -0
  451. cloudxpl/modules/virt/nutanix_enum.py +40 -0
  452. cloudxpl/modules/virt/qemu_cve_2019_14378.py +30 -0
  453. cloudxpl/modules/virt/qemu_cve_2019_18389.py +30 -0
  454. cloudxpl/modules/virt/qemu_cve_2020_14364.py +30 -0
  455. cloudxpl/modules/virt/qemu_cve_2023_6693.py +41 -0
  456. cloudxpl/modules/virt/qemu_cve_2024_3446.py +41 -0
  457. cloudxpl/modules/virt/qemu_cve_2024_4467.py +41 -0
  458. cloudxpl/modules/virt/qemu_cve_2024_49841.py +41 -0
  459. cloudxpl/modules/virt/qemu_cve_2024_6519.py +40 -0
  460. cloudxpl/modules/virt/qemu_dma_reentrancy.py +40 -0
  461. cloudxpl/modules/virt/qemu_rtl8139_chain.py +41 -0
  462. cloudxpl/modules/virt/qemu_slirp_escape.py +41 -0
  463. cloudxpl/modules/virt/qemu_slirp_escape_bridge.py +42 -0
  464. cloudxpl/modules/virt/qemu_virtio_exploit.py +40 -0
  465. cloudxpl/modules/virt/sev_snp_enum.py +29 -0
  466. cloudxpl/modules/virt/sidechannel_cachewarp.py +30 -0
  467. cloudxpl/modules/virt/sidechannel_ddrop.py +29 -0
  468. cloudxpl/modules/virt/sidechannel_downfall.py +30 -0
  469. cloudxpl/modules/virt/sidechannel_inception.py +30 -0
  470. cloudxpl/modules/virt/sidechannel_wesee.py +30 -0
  471. cloudxpl/modules/virt/sidechannel_zenbleed.py +30 -0
  472. cloudxpl/modules/virt/vcenter_cve_2020_3952.py +30 -0
  473. cloudxpl/modules/virt/vcenter_cve_2021_21972.py +30 -0
  474. cloudxpl/modules/virt/vcenter_cve_2021_22005.py +34 -0
  475. cloudxpl/modules/virt/vcenter_cve_2021_44228.py +34 -0
  476. cloudxpl/modules/virt/vcenter_cve_2024_22252.py +30 -0
  477. cloudxpl/modules/virt/vcenter_cve_2024_22274.py +30 -0
  478. cloudxpl/modules/virt/vcenter_cve_2024_37079.py +40 -0
  479. cloudxpl/modules/virt/vcenter_cve_2024_37080.py +41 -0
  480. cloudxpl/modules/virt/vcenter_cve_2024_37081.py +30 -0
  481. cloudxpl/modules/virt/vcenter_cve_2024_38812.py +41 -0
  482. cloudxpl/modules/virt/vcenter_cve_2024_38813.py +41 -0
  483. cloudxpl/modules/virt/vcenter_cve_2025_41225.py +41 -0
  484. cloudxpl/modules/virt/vcenter_cve_2026_59309.py +40 -0
  485. cloudxpl/modules/virt/vcenter_cve_2026_59310.py +40 -0
  486. cloudxpl/modules/virt/vcenter_exploit.py +40 -0
  487. cloudxpl/modules/virt/vcenter_saml_bypass.py +41 -0
  488. cloudxpl/modules/virt/vcenter_secrets_dump.py +33 -0
  489. cloudxpl/modules/virt/vcenter_vmdir_bridge.py +34 -0
  490. cloudxpl/modules/virt/vcenterkit_bridge.py +40 -0
  491. cloudxpl/modules/virt/vdi_breakout.py +40 -0
  492. cloudxpl/modules/virt/virt_cross_domain.py +41 -0
  493. cloudxpl/modules/virt/virt_maestro_detect.py +41 -0
  494. cloudxpl/modules/virt/virt_side_channel.py +41 -0
  495. cloudxpl/modules/virt/virt_snapshot_theft.py +41 -0
  496. cloudxpl/modules/virt/virt_vtpm_extract.py +41 -0
  497. cloudxpl/modules/virt/vmware_api_enum.py +29 -0
  498. cloudxpl/modules/virt/vmware_enum_vms_bridge.py +33 -0
  499. cloudxpl/modules/virt/vmware_exploitation_bridge.py +33 -0
  500. cloudxpl/modules/virt/vmware_http_login_bridge.py +33 -0
  501. cloudxpl/modules/virt/vmware_tools_lpe.py +40 -0
  502. cloudxpl/modules/virt/xen_cve_2023_46842.py +41 -0
  503. cloudxpl/modules/virt/xen_grant_escape.py +40 -0
  504. cloudxpl/modules/virt/xen_iommu_exploit.py +40 -0
  505. cloudxpl/modules/virt/xen_venom.py +41 -0
  506. cloudxpl/modules/virt/xen_xsa486.py +41 -0
  507. cloudxpl/modules/virt/xen_xsa500.py +41 -0
  508. cloudxpl/modules/virt/xen_xsa505.py +41 -0
  509. cloudxpl/modules/virt/xen_xsa507.py +30 -0
  510. cloudxpl/modules/virt/xen_xsa517.py +41 -0
  511. cloudxpl/modules/virt/xen_xsa521.py +41 -0
  512. cloudxpl/modules/virt/xen_xsa_500.py +30 -0
  513. cloudxpl/modules/virt/xen_xsa_505.py +30 -0
  514. cloudxpl/modules/virt/xen_xsa_507.py +30 -0
  515. cloudxpl/modules/virt/xen_xsa_517.py +30 -0
  516. cloudxpl/modules/virt/xen_xsa_521.py +30 -0
  517. cloudxpl/py.typed +0 -0
  518. cloudxpl-4.2.0.dist-info/METADATA +98 -0
  519. cloudxpl-4.2.0.dist-info/RECORD +522 -0
  520. cloudxpl-4.2.0.dist-info/WHEEL +5 -0
  521. cloudxpl-4.2.0.dist-info/entry_points.txt +3 -0
  522. cloudxpl-4.2.0.dist-info/top_level.txt +1 -0
@@ -0,0 +1,575 @@
1
+ """Route CLI commands to cloud provider modules."""
2
+
3
+ from __future__ import annotations
4
+
5
+ import importlib
6
+ import sys
7
+ from typing import Any
8
+
9
+
10
+ MODULE_MAP = {
11
+ "alibaba": {
12
+ "cloudtoolkit-bridge": "cloudxpl.modules.alibaba.cloudtoolkit_bridge",
13
+ "cve-2026-19339": "cloudxpl.modules.alibaba.cve_2026_19339",
14
+ "ecs-enum": "cloudxpl.modules.alibaba.ecs_enum",
15
+ "ecs-metadata": "cloudxpl.modules.alibaba.ecs_metadata",
16
+ "oss-enum": "cloudxpl.modules.alibaba.oss_enum",
17
+ "oss-exploit": "cloudxpl.modules.alibaba.oss_exploit",
18
+ "ram-enum": "cloudxpl.modules.alibaba.ram_enum",
19
+ "rds-enum": "cloudxpl.modules.alibaba.rds_enum",
20
+ },
21
+ "aws": {
22
+ "cloudformation-exploit": "cloudxpl.modules.aws.cloudformation_exploit",
23
+ "cloudtrail-disable": "cloudxpl.modules.aws.cloudtrail_disable",
24
+ "cloudtrail-tamper": "cloudxpl.modules.aws.cloudtrail_tamper",
25
+ "codebuild-exploit": "cloudxpl.modules.aws.codebuild_exploit",
26
+ "codepipeline-exploit": "cloudxpl.modules.aws.codepipeline_exploit",
27
+ "cognito-exploit": "cloudxpl.modules.aws.cognito_exploit",
28
+ "cve-2024-28056": "cloudxpl.modules.aws.cve_2024_28056",
29
+ "cve-2026-5707": "cloudxpl.modules.aws.cve_2026_5707",
30
+ "cve-2026-5708": "cloudxpl.modules.aws.cve_2026_5708",
31
+ "cve-2026-5709": "cloudxpl.modules.aws.cve_2026_5709",
32
+ "dynamodb-enum": "cloudxpl.modules.aws.dynamodb_enum",
33
+ "ebs-snapshot": "cloudxpl.modules.aws.ebs_snapshot",
34
+ "ec2-enum": "cloudxpl.modules.aws.ec2_enum",
35
+ "ec2-imds-pivot": "cloudxpl.modules.aws.ec2_imds_pivot",
36
+ "ec2-ssm": "cloudxpl.modules.aws.ec2_ssm",
37
+ "ec2-userdata": "cloudxpl.modules.aws.ec2_userdata",
38
+ "ecr-enum": "cloudxpl.modules.aws.ecr_enum",
39
+ "ecs-exploit": "cloudxpl.modules.aws.ecs_exploit",
40
+ "eks-enum": "cloudxpl.modules.aws.eks_enum",
41
+ "eks-exploit": "cloudxpl.modules.aws.eks_exploit",
42
+ "eventbridge-exploit": "cloudxpl.modules.aws.eventbridge_exploit",
43
+ "glue-exploit": "cloudxpl.modules.aws.glue_exploit",
44
+ "guardduty-bypass": "cloudxpl.modules.aws.guardduty_bypass",
45
+ "iam-enum": "cloudxpl.modules.aws.iam_enum",
46
+ "iam-privesc": "cloudxpl.modules.aws.iam_privesc",
47
+ "lambda-enum": "cloudxpl.modules.aws.lambda_enum",
48
+ "lambda-inject": "cloudxpl.modules.aws.lambda_inject",
49
+ "lambda-persist": "cloudxpl.modules.aws.lambda_persist",
50
+ "org-enum": "cloudxpl.modules.aws.org_enum",
51
+ "pacu-bridge": "cloudxpl.modules.aws.pacu_bridge",
52
+ "rds-enum": "cloudxpl.modules.aws.rds_enum",
53
+ "rds-exploit": "cloudxpl.modules.aws.rds_exploit",
54
+ "route53-takeover": "cloudxpl.modules.aws.route53_takeover",
55
+ "s3-enum": "cloudxpl.modules.aws.s3_enum",
56
+ "s3-exfil": "cloudxpl.modules.aws.s3_exfil",
57
+ "s3-exploit": "cloudxpl.modules.aws.s3_exploit",
58
+ "secrets-manager": "cloudxpl.modules.aws.secrets_manager",
59
+ "sns-exploit": "cloudxpl.modules.aws.sns_exploit",
60
+ "sqs-exploit": "cloudxpl.modules.aws.sqs_exploit",
61
+ "ssm-param-store": "cloudxpl.modules.aws.ssm_param_store",
62
+ "sso-enum": "cloudxpl.modules.aws.sso_enum",
63
+ "ssrf-imds": "cloudxpl.modules.aws.ssrf_imds",
64
+ "stepfunctions-exploit": "cloudxpl.modules.aws.stepfunctions_exploit",
65
+ "sts-enum": "cloudxpl.modules.aws.sts_enum",
66
+ "vpc-enum": "cloudxpl.modules.aws.vpc_enum",
67
+ },
68
+ "azure": {
69
+ "Azure FabricScape Container Escape (CVE-2022-30137)": "cloudxpl.modules.azure.fabricscape_cve_2022_30137",
70
+ "Azure Functions Docker Escape": "cloudxpl.modules.azure.azure_functions_escape",
71
+ "Azurescape ACI Cross-Tenant Escape (Bridge)": "cloudxpl.modules.azure.azurescape_bridge",
72
+ "aks-enum": "cloudxpl.modules.azure.aks_enum",
73
+ "aks-exploit": "cloudxpl.modules.azure.aks_exploit",
74
+ "app-service-exploit": "cloudxpl.modules.azure.app_service_exploit",
75
+ "arm-injection": "cloudxpl.modules.azure.arm_injection",
76
+ "automation-exploit": "cloudxpl.modules.azure.automation_exploit",
77
+ "azurehound-bridge": "cloudxpl.modules.azure.azurehound_bridge",
78
+ "azurescape": "cloudxpl.modules.azure.azurescape",
79
+ "blob-exfil": "cloudxpl.modules.azure.blob_exfil",
80
+ "blob-exploit": "cloudxpl.modules.azure.blob_exploit",
81
+ "conditional-access": "cloudxpl.modules.azure.conditional_access",
82
+ "cosmosdb-exploit": "cloudxpl.modules.azure.cosmosdb_exploit",
83
+ "cve-2024-50603": "cloudxpl.modules.azure.cve_2024_50603",
84
+ "cve-2025-29813": "cloudxpl.modules.azure.cve_2025_29813",
85
+ "cve-2025-29827": "cloudxpl.modules.azure.cve_2025_29827",
86
+ "cve-2025-29972": "cloudxpl.modules.azure.cve_2025_29972",
87
+ "cve-2025-53767": "cloudxpl.modules.azure.cve_2025_53767",
88
+ "cve-2026-20965": "cloudxpl.modules.azure.cve_2026_20965",
89
+ "defender-bypass": "cloudxpl.modules.azure.defender_bypass",
90
+ "devops-exploit": "cloudxpl.modules.azure.devops_exploit",
91
+ "entra-consent": "cloudxpl.modules.azure.entra_consent",
92
+ "entra-enum": "cloudxpl.modules.azure.entra_enum",
93
+ "entra-privesc": "cloudxpl.modules.azure.entra_privesc",
94
+ "entra-tokens": "cloudxpl.modules.azure.entra_tokens",
95
+ "fabricscape": "cloudxpl.modules.azure.fabricscape",
96
+ "function-exploit": "cloudxpl.modules.azure.function_exploit",
97
+ "function-persist": "cloudxpl.modules.azure.function_persist",
98
+ "functions-escape": "cloudxpl.modules.azure.functions_escape",
99
+ "graph-api-abuse": "cloudxpl.modules.azure.graph_api_abuse",
100
+ "keyvault-exploit": "cloudxpl.modules.azure.keyvault_exploit",
101
+ "logic-apps-exploit": "cloudxpl.modules.azure.logic_apps_exploit",
102
+ "managed-identity": "cloudxpl.modules.azure.managed_identity",
103
+ "nsg-enum": "cloudxpl.modules.azure.nsg_enum",
104
+ "pim-abuse": "cloudxpl.modules.azure.pim_abuse",
105
+ "rbac-enum": "cloudxpl.modules.azure.rbac_enum",
106
+ "rbac-exploit": "cloudxpl.modules.azure.rbac_exploit",
107
+ "resource-group-enum": "cloudxpl.modules.azure.resource_group_enum",
108
+ "sentinel-bypass": "cloudxpl.modules.azure.sentinel_bypass",
109
+ "service-principal": "cloudxpl.modules.azure.service_principal",
110
+ "sql-enum": "cloudxpl.modules.azure.sql_enum",
111
+ "sql-exploit": "cloudxpl.modules.azure.sql_exploit",
112
+ "storage-enum": "cloudxpl.modules.azure.storage_enum",
113
+ "stormspotter-bridge": "cloudxpl.modules.azure.stormspotter_bridge",
114
+ "subscription-enum": "cloudxpl.modules.azure.subscription_enum",
115
+ "vm-enum": "cloudxpl.modules.azure.vm_enum",
116
+ "vm-exploit": "cloudxpl.modules.azure.vm_exploit",
117
+ "vm-imds": "cloudxpl.modules.azure.vm_imds",
118
+ },
119
+ "cicd": {
120
+ "cicd-secret-dump": "cloudxpl.modules.cicd.cicd_secret_dump",
121
+ "circleci-runner-escape": "cloudxpl.modules.cicd.circleci_runner_escape",
122
+ "gha-runner-escape": "cloudxpl.modules.cicd.gha_runner_escape",
123
+ "gha-supply-chain": "cloudxpl.modules.cicd.gha_supply_chain",
124
+ "gitlab-ci-rce": "cloudxpl.modules.cicd.gitlab_ci_rce",
125
+ "gitlab-runner-hijack": "cloudxpl.modules.cicd.gitlab_runner_hijack",
126
+ "jenkins-agent-abuse": "cloudxpl.modules.cicd.jenkins_agent_abuse",
127
+ "jenkins-plugin-privesc": "cloudxpl.modules.cicd.jenkins_plugin_privesc",
128
+ "terraform-agent-abuse": "cloudxpl.modules.cicd.terraform_agent_abuse",
129
+ "terraform-token-leak": "cloudxpl.modules.cicd.terraform_token_leak",
130
+ },
131
+ "cred": {
132
+ "config-file-scan": "cloudxpl.modules.cred.config_file_scan",
133
+ "credential-report": "cloudxpl.modules.cred.credential_report",
134
+ "env-var-scan": "cloudxpl.modules.cred.env_var_scan",
135
+ "federation-abuse": "cloudxpl.modules.cred.federation_abuse",
136
+ "key-rotation-check": "cloudxpl.modules.cred.key_rotation_check",
137
+ "leaked-key-exploit": "cloudxpl.modules.cred.leaked_key_exploit",
138
+ "metadata-harvest": "cloudxpl.modules.cred.metadata_harvest",
139
+ "mfa-relay": "cloudxpl.modules.cred.mfa_relay",
140
+ "oauth-token-theft": "cloudxpl.modules.cred.oauth_token_theft",
141
+ "rsa-netwitness-exploit": "cloudxpl.modules.cred.rsa_netwitness_exploit",
142
+ "rsa-securid-enum": "cloudxpl.modules.cred.rsa_securid_enum",
143
+ "seed-theft-check": "cloudxpl.modules.cred.seed_theft_check",
144
+ "temp-cred-extend": "cloudxpl.modules.cred.temp_cred_extend",
145
+ "token-lifetime-abuse": "cloudxpl.modules.cred.token_lifetime_abuse",
146
+ },
147
+ "digitalocean": {
148
+ "api-token-abuse": "cloudxpl.modules.digitalocean.api_token_abuse",
149
+ "doks-enum": "cloudxpl.modules.digitalocean.doks_enum",
150
+ "droplet-agent-rce": "cloudxpl.modules.digitalocean.droplet_agent_rce",
151
+ "droplet-enum": "cloudxpl.modules.digitalocean.droplet_enum",
152
+ "firewall-enum": "cloudxpl.modules.digitalocean.firewall_enum",
153
+ "metadata-ssrf": "cloudxpl.modules.digitalocean.metadata_ssrf",
154
+ "spaces-enum": "cloudxpl.modules.digitalocean.spaces_enum",
155
+ "spaces-exploit": "cloudxpl.modules.digitalocean.spaces_exploit",
156
+ },
157
+ "gcp": {
158
+ "artifact-registry": "cloudxpl.modules.gcp.artifact_registry",
159
+ "bigquery-exploit": "cloudxpl.modules.gcp.bigquery_exploit",
160
+ "bucket-enum": "cloudxpl.modules.gcp.bucket_enum",
161
+ "bucket-exfil": "cloudxpl.modules.gcp.bucket_exfil",
162
+ "bucket-exploit": "cloudxpl.modules.gcp.bucket_exploit",
163
+ "cloud-armor-bypass": "cloudxpl.modules.gcp.cloud_armor_bypass",
164
+ "cloudbuild-exploit": "cloudxpl.modules.gcp.cloudbuild_exploit",
165
+ "cloudbuild-supply-chain": "cloudxpl.modules.gcp.cloudbuild_supply_chain",
166
+ "cloudfunctions-exploit": "cloudxpl.modules.gcp.cloudfunctions_exploit",
167
+ "cloudfunctions-persist": "cloudxpl.modules.gcp.cloudfunctions_persist",
168
+ "cloudrun-exploit": "cloudxpl.modules.gcp.cloudrun_exploit",
169
+ "cloudsql-enum": "cloudxpl.modules.gcp.cloudsql_enum",
170
+ "cloudsql-exploit": "cloudxpl.modules.gcp.cloudsql_exploit",
171
+ "composer-exploit": "cloudxpl.modules.gcp.composer_exploit",
172
+ "compute-enum": "cloudxpl.modules.gcp.compute_enum",
173
+ "compute-exploit": "cloudxpl.modules.gcp.compute_exploit",
174
+ "compute-imds": "cloudxpl.modules.gcp.compute_imds",
175
+ "cve-2025-51591": "cloudxpl.modules.gcp.cve_2025_51591",
176
+ "cve-2026-2031": "cloudxpl.modules.gcp.cve_2026_2031",
177
+ "cve-2026-2264": "cloudxpl.modules.gcp.cve_2026_2264",
178
+ "cve-2026-31431": "cloudxpl.modules.gcp.cve_2026_31431",
179
+ "cve-2026-46300": "cloudxpl.modules.gcp.cve_2026_46300",
180
+ "cve-2026-81867": "cloudxpl.modules.gcp.cve_2026_81867",
181
+ "dataflow-exploit": "cloudxpl.modules.gcp.dataflow_exploit",
182
+ "dns-takeover": "cloudxpl.modules.gcp.dns_takeover",
183
+ "gcpbucketbrute-bridge": "cloudxpl.modules.gcp.gcpbucketbrute_bridge",
184
+ "gke-autopilot-escape": "cloudxpl.modules.gcp.gke_autopilot_escape",
185
+ "gke-enum": "cloudxpl.modules.gcp.gke_enum",
186
+ "gke-exploit": "cloudxpl.modules.gcp.gke_exploit",
187
+ "iam-privesc": "cloudxpl.modules.gcp.iam_privesc",
188
+ "iap-bypass": "cloudxpl.modules.gcp.iap_bypass",
189
+ "imagerunner-exploit": "cloudxpl.modules.gcp.imagerunner_exploit",
190
+ "kms-exploit": "cloudxpl.modules.gcp.kms_exploit",
191
+ "logging-bypass": "cloudxpl.modules.gcp.logging_bypass",
192
+ "metadata-ssrf": "cloudxpl.modules.gcp.metadata_ssrf",
193
+ "org-policy-enum": "cloudxpl.modules.gcp.org_policy_enum",
194
+ "project-enum": "cloudxpl.modules.gcp.project_enum",
195
+ "pubsub-exploit": "cloudxpl.modules.gcp.pubsub_exploit",
196
+ "sa-impersonate": "cloudxpl.modules.gcp.sa_impersonate",
197
+ "sa-key-theft": "cloudxpl.modules.gcp.sa_key_theft",
198
+ "secretmanager-exploit": "cloudxpl.modules.gcp.secretmanager_exploit",
199
+ "service-account-enum": "cloudxpl.modules.gcp.service_account_enum",
200
+ "terraform-state": "cloudxpl.modules.gcp.terraform_state",
201
+ "vpc-firewall-enum": "cloudxpl.modules.gcp.vpc_firewall_enum",
202
+ "wif-abuse": "cloudxpl.modules.gcp.wif_abuse",
203
+ "workload-identity": "cloudxpl.modules.gcp.workload_identity",
204
+ },
205
+ "hetzner": {
206
+ "api-token-abuse": "cloudxpl.modules.hetzner.api_token_abuse",
207
+ "firewall-enum": "cloudxpl.modules.hetzner.firewall_enum",
208
+ "floating-ip-hijack": "cloudxpl.modules.hetzner.floating_ip_hijack",
209
+ "metadata-ssrf": "cloudxpl.modules.hetzner.metadata_ssrf",
210
+ "server-enum": "cloudxpl.modules.hetzner.server_enum",
211
+ },
212
+ "ibm": {
213
+ "cloudpak-exploit": "cloudxpl.modules.ibm.cloudpak_exploit",
214
+ "cos-enum": "cloudxpl.modules.ibm.cos_enum",
215
+ "cos-exploit": "cloudxpl.modules.ibm.cos_exploit",
216
+ "iam-enum": "cloudxpl.modules.ibm.iam_enum",
217
+ "qradar-exploit": "cloudxpl.modules.ibm.qradar_exploit",
218
+ "vpc-enum": "cloudxpl.modules.ibm.vpc_enum",
219
+ },
220
+ "k8s": {
221
+ "BuildKit Arbitrary File Deletion (CVE-2024-23652)": "cloudxpl.modules.k8s.runc_cve_2024_23652",
222
+ "BuildKit Mount-Cache Race TOCTOU (CVE-2024-23651)": "cloudxpl.modules.k8s.runc_cve_2024_23651",
223
+ "BuildKit Privilege Check Bypass (CVE-2024-23653)": "cloudxpl.modules.k8s.runc_cve_2024_23653",
224
+ "Linux Kernel Container Breakout (CVE-2026-52910)": "cloudxpl.modules.k8s.container_cve_2026_52910",
225
+ "admission-bypass": "cloudxpl.modules.k8s.admission_bypass",
226
+ "api-server-anon": "cloudxpl.modules.k8s.api_server_anon",
227
+ "cluster-enum": "cloudxpl.modules.k8s.cluster_enum",
228
+ "configmap-dump": "cloudxpl.modules.k8s.configmap_dump",
229
+ "container-escape": "cloudxpl.modules.k8s.container_escape",
230
+ "crd-abuse": "cloudxpl.modules.k8s.crd_abuse",
231
+ "cve-2019-5736": "cloudxpl.modules.k8s.cve_2019_5736",
232
+ "cve-2021-30465": "cloudxpl.modules.k8s.cve_2021_30465",
233
+ "cve-2022-0492": "cloudxpl.modules.k8s.cve_2022_0492",
234
+ "cve-2022-0847": "cloudxpl.modules.k8s.cve_2022_0847",
235
+ "cve-2022-23648": "cloudxpl.modules.k8s.cve_2022_23648",
236
+ "cve-2024-0132": "cloudxpl.modules.k8s.cve_2024_0132",
237
+ "cve-2024-1753": "cloudxpl.modules.k8s.cve_2024_1753",
238
+ "cve-2024-21626": "cloudxpl.modules.k8s.cve_2024_21626",
239
+ "cve-2024-23651": "cloudxpl.modules.k8s.cve_2024_23651",
240
+ "cve-2024-23652": "cloudxpl.modules.k8s.cve_2024_23652",
241
+ "cve-2024-23653": "cloudxpl.modules.k8s.cve_2024_23653",
242
+ "cve-2025-23266": "cloudxpl.modules.k8s.cve_2025_23266",
243
+ "cve-2025-31133": "cloudxpl.modules.k8s.cve_2025_31133",
244
+ "cve-2025-52565": "cloudxpl.modules.k8s.cve_2025_52565",
245
+ "cve-2025-52881": "cloudxpl.modules.k8s.cve_2025_52881",
246
+ "etcd-exploit": "cloudxpl.modules.k8s.etcd_exploit",
247
+ "helm-exploit": "cloudxpl.modules.k8s.helm_exploit",
248
+ "hostpath-mount": "cloudxpl.modules.k8s.hostpath_mount",
249
+ "kube-hunter-bridge": "cloudxpl.modules.k8s.kube_hunter_bridge",
250
+ "kubelet-exploit": "cloudxpl.modules.k8s.kubelet_exploit",
251
+ "network-policy-bypass": "cloudxpl.modules.k8s.network_policy_bypass",
252
+ "node-proxy": "cloudxpl.modules.k8s.node_proxy",
253
+ "peirates-bridge": "cloudxpl.modules.k8s.peirates_bridge",
254
+ "pod-enum": "cloudxpl.modules.k8s.pod_enum",
255
+ "pod-escape-cve": "cloudxpl.modules.k8s.pod_escape_cve",
256
+ "privileged-pod": "cloudxpl.modules.k8s.privileged_pod",
257
+ "rbac-enum": "cloudxpl.modules.k8s.rbac_enum",
258
+ "rbac-escalation": "cloudxpl.modules.k8s.rbac_escalation",
259
+ "registry-exploit": "cloudxpl.modules.k8s.registry_exploit",
260
+ "runc-cve-2019-5736": "cloudxpl.modules.k8s.runc_cve_2019_5736",
261
+ "sa-token-theft": "cloudxpl.modules.k8s.sa_token_theft",
262
+ "secret-dump": "cloudxpl.modules.k8s.secret_dump",
263
+ "service-mesh-exploit": "cloudxpl.modules.k8s.service_mesh_exploit",
264
+ "sidecar-inject": "cloudxpl.modules.k8s.sidecar_inject",
265
+ },
266
+ "multi": {
267
+ "Container Escape PoC Collection (Bridge)": "cloudxpl.modules.multi.container_escape_collection_bridge",
268
+ "GitHub Actions Self-Hosted Runner Exploit": "cloudxpl.modules.multi.github_actions_runner_exploit",
269
+ "ci-cd-exploit": "cloudxpl.modules.multi.ci_cd_exploit",
270
+ "cloud-side-channel": "cloudxpl.modules.multi.cloud_side_channel",
271
+ "cloudfox-bridge": "cloudxpl.modules.multi.cloudfox_bridge",
272
+ "cloudtoolkit-multi": "cloudxpl.modules.multi.cloudtoolkit_multi",
273
+ "cross-cloud-pivot": "cloudxpl.modules.multi.cross_cloud_pivot",
274
+ "docker-escape": "cloudxpl.modules.multi.docker_escape",
275
+ "docker-socket": "cloudxpl.modules.multi.docker_socket",
276
+ "firecracker-escape": "cloudxpl.modules.multi.firecracker_escape",
277
+ "git-secret-scan": "cloudxpl.modules.multi.git_secret_scan",
278
+ "huawei-recon": "cloudxpl.modules.multi.huawei_recon",
279
+ "iac-secret-scan": "cloudxpl.modules.multi.iac_secret_scan",
280
+ "openstack-generic": "cloudxpl.modules.multi.openstack_generic",
281
+ "prowler-bridge": "cloudxpl.modules.multi.prowler_bridge",
282
+ "scoutsuite-bridge": "cloudxpl.modules.multi.scoutsuite_bridge",
283
+ "steampipe-bridge": "cloudxpl.modules.multi.steampipe_bridge",
284
+ "terraform-plan-inject": "cloudxpl.modules.multi.terraform_plan_inject",
285
+ "terraform-state-exploit": "cloudxpl.modules.multi.terraform_state_exploit",
286
+ },
287
+ "net": {
288
+ "dns-takeover": "cloudxpl.modules.net.dns_takeover",
289
+ "exposed-services": "cloudxpl.modules.net.exposed_services",
290
+ "load-balancer-enum": "cloudxpl.modules.net.load_balancer_enum",
291
+ "peering-abuse": "cloudxpl.modules.net.peering_abuse",
292
+ "privatelink-abuse": "cloudxpl.modules.net.privatelink_abuse",
293
+ "sg-analysis": "cloudxpl.modules.net.sg_analysis",
294
+ "vpc-enum": "cloudxpl.modules.net.vpc_enum",
295
+ "vpn-exploit": "cloudxpl.modules.net.vpn_exploit",
296
+ },
297
+ "oci": {
298
+ "audit-bypass": "cloudxpl.modules.oci.audit_bypass",
299
+ "bucket-enum": "cloudxpl.modules.oci.bucket_enum",
300
+ "bucket-exploit": "cloudxpl.modules.oci.bucket_exploit",
301
+ "compute-enum": "cloudxpl.modules.oci.compute_enum",
302
+ "cve-2025-61882": "cloudxpl.modules.oci.cve_2025_61882",
303
+ "cve-2026-21962": "cloudxpl.modules.oci.cve_2026_21962",
304
+ "iam-enum": "cloudxpl.modules.oci.iam_enum",
305
+ "metadata-ssrf": "cloudxpl.modules.oci.metadata_ssrf",
306
+ "ocinfernobridge": "cloudxpl.modules.oci.ocinfernobridge",
307
+ "volume-attach": "cloudxpl.modules.oci.volume_attach",
308
+ },
309
+ "ovh": {
310
+ "api-abuse": "cloudxpl.modules.ovh.api_abuse",
311
+ "bare-metal-ipmi": "cloudxpl.modules.ovh.bare_metal_ipmi",
312
+ "email-spoof": "cloudxpl.modules.ovh.email_spoof",
313
+ "openstack-enum": "cloudxpl.modules.ovh.openstack_enum",
314
+ "swift-exploit": "cloudxpl.modules.ovh.swift_exploit",
315
+ "vrack-lateral": "cloudxpl.modules.ovh.vrack_lateral",
316
+ },
317
+ "paas": {
318
+ "aci-azurescape": "cloudxpl.modules.paas.aci_azurescape",
319
+ "appservice-sandbox-escape": "cloudxpl.modules.paas.appservice_sandbox_escape",
320
+ "beanstalk-escape": "cloudxpl.modules.paas.beanstalk_escape",
321
+ "cloudrun-runc-escape": "cloudxpl.modules.paas.cloudrun_runc_escape",
322
+ "fargate-firecracker": "cloudxpl.modules.paas.fargate_firecracker",
323
+ "gcp-appint-sandbox": "cloudxpl.modules.paas.gcp_appint_sandbox",
324
+ "heroku-dyno-recon": "cloudxpl.modules.paas.heroku_dyno_recon",
325
+ "lambda-tmp-persist": "cloudxpl.modules.paas.lambda_tmp_persist",
326
+ "paas-metadata-pivot": "cloudxpl.modules.paas.paas_metadata_pivot",
327
+ "railway-escape": "cloudxpl.modules.paas.railway_escape",
328
+ },
329
+ "serverless": {
330
+ "api-gateway-bypass": "cloudxpl.modules.serverless.api_gateway_bypass",
331
+ "cold-start-abuse": "cloudxpl.modules.serverless.cold_start_abuse",
332
+ "concurrency-abuse": "cloudxpl.modules.serverless.concurrency_abuse",
333
+ "env-extraction": "cloudxpl.modules.serverless.env_extraction",
334
+ "event-injection": "cloudxpl.modules.serverless.event_injection",
335
+ "iam-role-chain": "cloudxpl.modules.serverless.iam_role_chain",
336
+ "layer-poisoning": "cloudxpl.modules.serverless.layer_poisoning",
337
+ "log-injection": "cloudxpl.modules.serverless.log_injection",
338
+ "reverse-shell": "cloudxpl.modules.serverless.reverse_shell",
339
+ "runtime-rce": "cloudxpl.modules.serverless.runtime_rce",
340
+ "step-function-abuse": "cloudxpl.modules.serverless.step_function_abuse",
341
+ "tmp-persistence": "cloudxpl.modules.serverless.tmp_persistence",
342
+ "trigger-hijack": "cloudxpl.modules.serverless.trigger_hijack",
343
+ "vpc-pivot": "cloudxpl.modules.serverless.vpc_pivot",
344
+ },
345
+ "storage": {
346
+ "acl-check": "cloudxpl.modules.storage.acl_check",
347
+ "bucket-bruteforce": "cloudxpl.modules.storage.bucket_bruteforce",
348
+ "bucket-finder": "cloudxpl.modules.storage.bucket_finder",
349
+ "bucketloot-bridge": "cloudxpl.modules.storage.bucketloot_bridge",
350
+ "cors-exploit": "cloudxpl.modules.storage.cors_exploit",
351
+ "download-mass": "cloudxpl.modules.storage.download_mass",
352
+ "grayhat-search": "cloudxpl.modules.storage.grayhat_search",
353
+ "policy-abuse": "cloudxpl.modules.storage.policy_abuse",
354
+ "presigned-abuse": "cloudxpl.modules.storage.presigned_abuse",
355
+ "public-objects": "cloudxpl.modules.storage.public_objects",
356
+ "ransomware-sim": "cloudxpl.modules.storage.ransomware_sim",
357
+ "s3scanner-bridge": "cloudxpl.modules.storage.s3scanner_bridge",
358
+ "static-site-takeover": "cloudxpl.modules.storage.static_site_takeover",
359
+ "upload-exploit": "cloudxpl.modules.storage.upload_exploit",
360
+ "versioning-exploit": "cloudxpl.modules.storage.versioning_exploit",
361
+ },
362
+ "tencent": {
363
+ "cam-enum": "cloudxpl.modules.tencent.cam_enum",
364
+ "cloudtoolkit-bridge": "cloudxpl.modules.tencent.cloudtoolkit_bridge",
365
+ "cos-enum": "cloudxpl.modules.tencent.cos_enum",
366
+ "cos-exploit": "cloudxpl.modules.tencent.cos_exploit",
367
+ "cve-2026-30859": "cloudxpl.modules.tencent.cve_2026_30859",
368
+ "cvm-metadata": "cloudxpl.modules.tencent.cvm_metadata",
369
+ },
370
+ "vdi": {
371
+ "avd-privesc": "cloudxpl.modules.vdi.avd_privesc",
372
+ "citrix-session-recording-rce": "cloudxpl.modules.vdi.citrix_session_recording_rce",
373
+ "citrix-vda-lpe": "cloudxpl.modules.vdi.citrix_vda_lpe",
374
+ "citrix-vdi-cve-2025-6759": "cloudxpl.modules.vdi.citrix_vdi_cve_2025_6759",
375
+ "horizon-escape": "cloudxpl.modules.vdi.horizon_escape",
376
+ "vdi-breakout-clipboard": "cloudxpl.modules.vdi.vdi_breakout_clipboard",
377
+ "vdi-breakout-dialog": "cloudxpl.modules.vdi.vdi_breakout_dialog",
378
+ "vdi-breakout-drive": "cloudxpl.modules.vdi.vdi_breakout_drive",
379
+ "vdi-breakout-print": "cloudxpl.modules.vdi.vdi_breakout_print",
380
+ "vdi-breakout-usb": "cloudxpl.modules.vdi.vdi_breakout_usb",
381
+ "vdi-kiosk-escape": "cloudxpl.modules.vdi.vdi_kiosk_escape",
382
+ "workspaces-lpe": "cloudxpl.modules.vdi.workspaces_lpe",
383
+ },
384
+ "virt": {
385
+ "AF_UNIX Container Escape (CVE-2026-80521)": "cloudxpl.modules.virt.container_cve_2026_80521",
386
+ "AMD Microcode Signature Bypass (CVE-2024-56161)": "cloudxpl.modules.virt.amd_microcode_cve_2024_56161",
387
+ "AMD SEV-SNP Attack Surface Scanner": "cloudxpl.modules.virt.sev_snp_enum",
388
+ "AWS Nitro LLC Side-Channel": "cloudxpl.modules.virt.nitro_sidechannel",
389
+ "Awesome Hyper-V Exploitation (Bridge)": "cloudxpl.modules.virt.awesome_hyperv_bridge",
390
+ "Awesome VM Exploit Collection (Bridge)": "cloudxpl.modules.virt.awesome_vm_exploit_bridge",
391
+ "CacheWarp — AMD SEV Fault Injection (CVE-2023-20592)": "cloudxpl.modules.virt.sidechannel_cachewarp",
392
+ "Citrix VAPD Unauthenticated RCE to SYSTEM (CVE-2024-8068/8069)": "cloudxpl.modules.virt.citrix_vapd_exploit",
393
+ "Citrix Virtual Apps LPE (CVE-2025-6759)": "cloudxpl.modules.virt.citrix_vdi_cve_2025_6759",
394
+ "Citrix XenServer Local Privilege Escalation (CVE-2026-53562)": "cloudxpl.modules.virt.citrix_cve_2026_53562",
395
+ "DDRop — Physical Memory Interposer (Intel TDX + AMD SEV)": "cloudxpl.modules.virt.sidechannel_ddrop",
396
+ "Downfall — Intel Gather Data Sampling (CVE-2022-40982)": "cloudxpl.modules.virt.sidechannel_downfall",
397
+ "ESXi AD Auth Bypass (CVE-2024-37085)": "cloudxpl.modules.virt.esxi_cve_2024_37085",
398
+ "ESXi Brute Force (Bridge)": "cloudxpl.modules.virt.esxi_brute_bridge",
399
+ "ESXi Fingerprint (Metasploit Bridge)": "cloudxpl.modules.virt.esxi_fingerprint_bridge",
400
+ "ESXi OpenSLP Heap Overflow (CVE-2019-5544)": "cloudxpl.modules.virt.esxi_cve_2019_5544",
401
+ "ESXi OpenSLP Heap Overflow — ESXiArgs (CVE-2021-21974)": "cloudxpl.modules.virt.esxi_cve_2021_21974",
402
+ "ESXi OpenSLP UAF RCE (CVE-2020-3992)": "cloudxpl.modules.virt.esxi_cve_2020_3992",
403
+ "ESXi VMXNET3 OOB Write VM Escape (CVE-2026-47876)": "cloudxpl.modules.virt.esxi_cve_2026_47876",
404
+ "Firecracker Jailer Symlink Host-Write (CVE-2026-1386)": "cloudxpl.modules.virt.firecracker_cve_2026_1386",
405
+ "Firecracker virtio-pci OOB Write (CVE-2026-5747)": "cloudxpl.modules.virt.firecracker_cve_2026_5747",
406
+ "Hyper-V Adjacent Network RCE (CVE-2022-21995)": "cloudxpl.modules.virt.hyperv_cve_2022_21995",
407
+ "Hyper-V Low-Priv Guest-to-Host RCE (CVE-2021-34450)": "cloudxpl.modules.virt.hyperv_cve_2021_34450",
408
+ "Hyper-V OOB Read Info Disclosure (CVE-2026-45607)": "cloudxpl.modules.virt.hyperv_cve_2026_45607",
409
+ "Hyper-V RDP Path Traversal Guest-to-Host (CVE-2019-0887)": "cloudxpl.modules.virt.hyperv_cve_2019_0887",
410
+ "Hyper-V Race Condition VM Escape (CVE-2022-30163)": "cloudxpl.modules.virt.hyperv_cve_2022_30163",
411
+ "Hyper-V Status Code RCE (CVE-2024-49117)": "cloudxpl.modules.virt.hyperv_cve_2024_49117",
412
+ "Hypervisor Resources Collection (Bridge)": "cloudxpl.modules.virt.hypervisor_resources_bridge",
413
+ "Inception — AMD Speculative RAS (CVE-2023-20569)": "cloudxpl.modules.virt.sidechannel_inception",
414
+ "Intel TDX Attack Surface Scanner": "cloudxpl.modules.virt.intel_tdx_enum",
415
+ "Kata Containers virtio-pmem/DAX Overwrite (CVE-2026-24834)": "cloudxpl.modules.virt.kata_cve_2026_24834",
416
+ "LOLESXi Living Off The Land (Bridge)": "cloudxpl.modules.virt.lolesxi_bridge",
417
+ "Nutanix Prism Auth Bypass (CVE-2026-84731)": "cloudxpl.modules.virt.nutanix_cve_2026_84731",
418
+ "Nutanix Prism SFTP Auth Bypass (CVE-2018-7750)": "cloudxpl.modules.virt.nutanix_cve_2018_7750",
419
+ "QEMU SLiRP Escape PoC (Bridge)": "cloudxpl.modules.virt.qemu_slirp_escape_bridge",
420
+ "QEMU SLiRP Heap Overflow (CVE-2019-14378)": "cloudxpl.modules.virt.qemu_cve_2019_14378",
421
+ "QEMU USB Emulator OOB R/W (CVE-2020-14364)": "cloudxpl.modules.virt.qemu_cve_2020_14364",
422
+ "QEMU virglrenderer Heap Overflow (CVE-2019-18389)": "cloudxpl.modules.virt.qemu_cve_2019_18389",
423
+ "VMware API Enumeration": "cloudxpl.modules.virt.vmware_api_enum",
424
+ "VMware Exploitation Collection (Bridge)": "cloudxpl.modules.virt.vmware_exploitation_bridge",
425
+ "VMware HTTP Login (Metasploit Bridge)": "cloudxpl.modules.virt.vmware_http_login_bridge",
426
+ "VMware Horizon Log4Shell (CVE-2021-44228)": "cloudxpl.modules.virt.horizon_log4shell",
427
+ "VMware VM Enumeration (Metasploit Bridge)": "cloudxpl.modules.virt.vmware_enum_vms_bridge",
428
+ "WeSee — AMD SEV-SNP #VC Interrupt (CVE-2024-25742)": "cloudxpl.modules.virt.sidechannel_wesee",
429
+ "Xen FIFO Event-Channel Race (XSA-505 / CVE-2026-62432)": "cloudxpl.modules.virt.xen_xsa_505",
430
+ "Xen Grant-Copy Type Confusion (XSA-500 / CVE-2026-62428)": "cloudxpl.modules.virt.xen_xsa_500",
431
+ "Xen Grant-Table Version Race — Host Privesc (XSA-517 / CVE-2026-79610)": "cloudxpl.modules.virt.xen_xsa_517",
432
+ "Xen Populate-on-Demand Memory Corruption (XSA-507 / CVE-2026-62434)": "cloudxpl.modules.virt.xen_xsa_507",
433
+ "Xen tapdisk Stack Overflow (XSA-521 / CVE-2026-102701)": "cloudxpl.modules.virt.xen_xsa_521",
434
+ "Zenbleed — AMD Zen 2 vzeroupper (CVE-2023-20593)": "cloudxpl.modules.virt.sidechannel_zenbleed",
435
+ "amd-microcode-cve-2024-56161": "cloudxpl.modules.virt.amd_microcode_cve_2024_56161",
436
+ "awesome-hyperv-bridge": "cloudxpl.modules.virt.awesome_hyperv_bridge",
437
+ "awesome-vm-exploit-bridge": "cloudxpl.modules.virt.awesome_vm_exploit_bridge",
438
+ "citrix-escape": "cloudxpl.modules.virt.citrix_escape",
439
+ "citrix-vapd-exploit": "cloudxpl.modules.virt.citrix_vapd_exploit",
440
+ "citrix-xsa-486": "cloudxpl.modules.virt.citrix_xsa_486",
441
+ "container-escape-collection-bridge": "cloudxpl.modules.virt.container_escape_collection_bridge",
442
+ "cve-2019-5544": "cloudxpl.modules.virt.cve_2019_5544",
443
+ "cve-2020-3952": "cloudxpl.modules.virt.cve_2020_3952",
444
+ "cve-2020-3992": "cloudxpl.modules.virt.cve_2020_3992",
445
+ "cve-2021-21972": "cloudxpl.modules.virt.cve_2021_21972",
446
+ "cve-2021-21974": "cloudxpl.modules.virt.cve_2021_21974",
447
+ "cve-2021-21985": "cloudxpl.modules.virt.cve_2021_21985",
448
+ "cve-2021-22005": "cloudxpl.modules.virt.cve_2021_22005",
449
+ "cve-2022-22954": "cloudxpl.modules.virt.cve_2022_22954",
450
+ "cve-2022-31705": "cloudxpl.modules.virt.cve_2022_31705",
451
+ "cve-2023-20867": "cloudxpl.modules.virt.cve_2023_20867",
452
+ "cve-2023-34048": "cloudxpl.modules.virt.cve_2023_34048",
453
+ "cve-2024-37085": "cloudxpl.modules.virt.cve_2024_37085",
454
+ "cve-2025-22225": "cloudxpl.modules.virt.cve_2025_22225",
455
+ "cve-2025-22226": "cloudxpl.modules.virt.cve_2025_22226",
456
+ "esxi-brute-bridge": "cloudxpl.modules.virt.esxi_brute_bridge",
457
+ "esxi-cve-2024-22252": "cloudxpl.modules.virt.esxi_cve_2024_22252",
458
+ "esxi-cve-2024-22253": "cloudxpl.modules.virt.esxi_cve_2024_22253",
459
+ "esxi-cve-2024-22254": "cloudxpl.modules.virt.esxi_cve_2024_22254",
460
+ "esxi-cve-2024-22255": "cloudxpl.modules.virt.esxi_cve_2024_22255",
461
+ "esxi-cve-2025-22224": "cloudxpl.modules.virt.esxi_cve_2025_22224",
462
+ "esxi-enum": "cloudxpl.modules.virt.esxi_enum",
463
+ "esxi-log4shell": "cloudxpl.modules.virt.esxi_log4shell",
464
+ "esxi-ransomware": "cloudxpl.modules.virt.esxi_ransomware",
465
+ "esxi-ssh-exploit": "cloudxpl.modules.virt.esxi_ssh_exploit",
466
+ "esxi-vm-escape": "cloudxpl.modules.virt.esxi_vm_escape",
467
+ "firecracker-cve-2026-1386": "cloudxpl.modules.virt.firecracker_cve_2026_1386",
468
+ "firecracker-escape": "cloudxpl.modules.virt.firecracker_escape",
469
+ "hyperv-cve-2019-0887": "cloudxpl.modules.virt.hyperv_cve_2019_0887",
470
+ "hyperv-cve-2021-28476": "cloudxpl.modules.virt.hyperv_cve_2021_28476",
471
+ "hyperv-cve-2021-34450": "cloudxpl.modules.virt.hyperv_cve_2021_34450",
472
+ "hyperv-cve-2022-21995": "cloudxpl.modules.virt.hyperv_cve_2022_21995",
473
+ "hyperv-cve-2024-20700": "cloudxpl.modules.virt.hyperv_cve_2024_20700",
474
+ "hyperv-cve-2024-21407": "cloudxpl.modules.virt.hyperv_cve_2024_21407",
475
+ "hyperv-cve-2024-38080": "cloudxpl.modules.virt.hyperv_cve_2024_38080",
476
+ "hyperv-cve-2024-49117": "cloudxpl.modules.virt.hyperv_cve_2024_49117",
477
+ "hyperv-cve-2025-21333": "cloudxpl.modules.virt.hyperv_cve_2025_21333",
478
+ "hyperv-cve-2025-21334": "cloudxpl.modules.virt.hyperv_cve_2025_21334",
479
+ "hyperv-cve-2025-21335": "cloudxpl.modules.virt.hyperv_cve_2025_21335",
480
+ "hyperv-cve-2026-40402": "cloudxpl.modules.virt.hyperv_cve_2026_40402",
481
+ "hyperv-cve-2026-45641": "cloudxpl.modules.virt.hyperv_cve_2026_45641",
482
+ "hyperv-cve-2026-57092": "cloudxpl.modules.virt.hyperv_cve_2026_57092",
483
+ "hyperv-cve-2026-69603": "cloudxpl.modules.virt.hyperv_cve_2026_69603",
484
+ "hyperv-cve-2026-72961": "cloudxpl.modules.virt.hyperv_cve_2026_72961",
485
+ "hyperv-cve-2026-80083": "cloudxpl.modules.virt.hyperv_cve_2026_80083",
486
+ "hyperv-cve-2026-89927": "cloudxpl.modules.virt.hyperv_cve_2026_89927",
487
+ "hyperv-enum": "cloudxpl.modules.virt.hyperv_enum",
488
+ "hyperv-escape": "cloudxpl.modules.virt.hyperv_escape",
489
+ "hyperv-remotefx": "cloudxpl.modules.virt.hyperv_remotefx",
490
+ "kata-escape": "cloudxpl.modules.virt.kata_escape",
491
+ "kvm-arm64-escape": "cloudxpl.modules.virt.kvm_arm64_escape",
492
+ "kvm-cve-2019-14835": "cloudxpl.modules.virt.kvm_cve_2019_14835",
493
+ "kvm-cve-2019-18389": "cloudxpl.modules.virt.kvm_cve_2019_18389",
494
+ "kvm-cve-2026-3842": "cloudxpl.modules.virt.kvm_cve_2026_3842",
495
+ "kvm-cve-2026-64561": "cloudxpl.modules.virt.kvm_cve_2026_64561",
496
+ "kvm-cve-2026-99999": "cloudxpl.modules.virt.kvm_cve_2026_99999",
497
+ "kvm-januscape": "cloudxpl.modules.virt.kvm_januscape",
498
+ "libvirt-enum": "cloudxpl.modules.virt.libvirt_enum",
499
+ "lolesxi-bridge": "cloudxpl.modules.virt.lolesxi_bridge",
500
+ "msf-vmware-bridge": "cloudxpl.modules.virt.msf_vmware_bridge",
501
+ "nutanix-cve-2018-7750": "cloudxpl.modules.virt.nutanix_cve_2018_7750",
502
+ "nutanix-enum": "cloudxpl.modules.virt.nutanix_enum",
503
+ "qemu-cve-2019-14378": "cloudxpl.modules.virt.qemu_cve_2019_14378",
504
+ "qemu-cve-2023-6693": "cloudxpl.modules.virt.qemu_cve_2023_6693",
505
+ "qemu-cve-2024-3446": "cloudxpl.modules.virt.qemu_cve_2024_3446",
506
+ "qemu-cve-2024-4467": "cloudxpl.modules.virt.qemu_cve_2024_4467",
507
+ "qemu-cve-2024-49841": "cloudxpl.modules.virt.qemu_cve_2024_49841",
508
+ "qemu-cve-2024-6519": "cloudxpl.modules.virt.qemu_cve_2024_6519",
509
+ "qemu-dma-reentrancy": "cloudxpl.modules.virt.qemu_dma_reentrancy",
510
+ "qemu-rtl8139-chain": "cloudxpl.modules.virt.qemu_rtl8139_chain",
511
+ "qemu-slirp-escape": "cloudxpl.modules.virt.qemu_slirp_escape",
512
+ "qemu-virtio-exploit": "cloudxpl.modules.virt.qemu_virtio_exploit",
513
+ "sidechannel-cachewarp": "cloudxpl.modules.virt.sidechannel_cachewarp",
514
+ "sidechannel-ddrop": "cloudxpl.modules.virt.sidechannel_ddrop",
515
+ "sidechannel-downfall": "cloudxpl.modules.virt.sidechannel_downfall",
516
+ "sidechannel-inception": "cloudxpl.modules.virt.sidechannel_inception",
517
+ "sidechannel-wesee": "cloudxpl.modules.virt.sidechannel_wesee",
518
+ "sidechannel-zenbleed": "cloudxpl.modules.virt.sidechannel_zenbleed",
519
+ "vCenter Analytics File Upload RCE (CVE-2021-22005)": "cloudxpl.modules.virt.vcenter_cve_2021_22005",
520
+ "vCenter Authenticated RCE (CVE-2024-22274)": "cloudxpl.modules.virt.vcenter_cve_2024_22274",
521
+ "vCenter Local Privilege Escalation (CVE-2024-37081)": "cloudxpl.modules.virt.vcenter_cve_2024_37081",
522
+ "vCenter Log4Shell (CVE-2021-44228)": "cloudxpl.modules.virt.vcenter_cve_2021_44228",
523
+ "vCenter Secrets Dump (Metasploit Bridge)": "cloudxpl.modules.virt.vcenter_secrets_dump",
524
+ "vCenter URB Excalibur All-Platform Escape (CVE-2024-22252)": "cloudxpl.modules.virt.vcenter_cve_2024_22252",
525
+ "vCenter Unauthenticated RCE (CVE-2021-21972)": "cloudxpl.modules.virt.vcenter_cve_2021_21972",
526
+ "vCenter vmdir Auth Bypass (CVE-2020-3952)": "cloudxpl.modules.virt.vcenter_cve_2020_3952",
527
+ "vCenter vmdir Auth Bypass (Metasploit Bridge)": "cloudxpl.modules.virt.vcenter_vmdir_bridge",
528
+ "vcenter-cve-2024-22274": "cloudxpl.modules.virt.vcenter_cve_2024_22274",
529
+ "vcenter-cve-2024-37079": "cloudxpl.modules.virt.vcenter_cve_2024_37079",
530
+ "vcenter-cve-2024-37080": "cloudxpl.modules.virt.vcenter_cve_2024_37080",
531
+ "vcenter-cve-2024-37081": "cloudxpl.modules.virt.vcenter_cve_2024_37081",
532
+ "vcenter-cve-2024-38812": "cloudxpl.modules.virt.vcenter_cve_2024_38812",
533
+ "vcenter-cve-2024-38813": "cloudxpl.modules.virt.vcenter_cve_2024_38813",
534
+ "vcenter-cve-2025-41225": "cloudxpl.modules.virt.vcenter_cve_2025_41225",
535
+ "vcenter-cve-2026-59309": "cloudxpl.modules.virt.vcenter_cve_2026_59309",
536
+ "vcenter-cve-2026-59310": "cloudxpl.modules.virt.vcenter_cve_2026_59310",
537
+ "vcenter-exploit": "cloudxpl.modules.virt.vcenter_exploit",
538
+ "vcenter-saml-bypass": "cloudxpl.modules.virt.vcenter_saml_bypass",
539
+ "vcenterkit-bridge": "cloudxpl.modules.virt.vcenterkit_bridge",
540
+ "vdi-breakout": "cloudxpl.modules.virt.vdi_breakout",
541
+ "virt-cross-domain": "cloudxpl.modules.virt.virt_cross_domain",
542
+ "virt-maestro-detect": "cloudxpl.modules.virt.virt_maestro_detect",
543
+ "virt-side-channel": "cloudxpl.modules.virt.virt_side_channel",
544
+ "virt-snapshot-theft": "cloudxpl.modules.virt.virt_snapshot_theft",
545
+ "virt-vtpm-extract": "cloudxpl.modules.virt.virt_vtpm_extract",
546
+ "vmware-exploitation-bridge": "cloudxpl.modules.virt.vmware_exploitation_bridge",
547
+ "vmware-tools-lpe": "cloudxpl.modules.virt.vmware_tools_lpe",
548
+ "xen-cve-2023-46842": "cloudxpl.modules.virt.xen_cve_2023_46842",
549
+ "xen-grant-escape": "cloudxpl.modules.virt.xen_grant_escape",
550
+ "xen-iommu-exploit": "cloudxpl.modules.virt.xen_iommu_exploit",
551
+ "xen-venom": "cloudxpl.modules.virt.xen_venom",
552
+ "xen-xsa486": "cloudxpl.modules.virt.xen_xsa486",
553
+ "xen-xsa500": "cloudxpl.modules.virt.xen_xsa500",
554
+ "xen-xsa505": "cloudxpl.modules.virt.xen_xsa505",
555
+ "xen-xsa507": "cloudxpl.modules.virt.xen_xsa507",
556
+ "xen-xsa517": "cloudxpl.modules.virt.xen_xsa517",
557
+ "xen-xsa521": "cloudxpl.modules.virt.xen_xsa521",
558
+ },
559
+ }
560
+
561
+
562
+ def dispatch(args: Any) -> int:
563
+ module_path = MODULE_MAP.get(args.command, {}).get(args.module)
564
+ if not module_path:
565
+ print(f"[!] Unknown: {args.command}/{args.module}", file=sys.stderr)
566
+ return 1
567
+
568
+ try:
569
+ mod = importlib.import_module(module_path)
570
+ except ImportError as exc:
571
+ print(f"[!] Failed to load {module_path}: {exc}", file=sys.stderr)
572
+ print(f"[*] Install provider deps: pip install cloudxpl-forge[{args.command}]", file=sys.stderr)
573
+ return 1
574
+
575
+ return mod.run(args)