cloudxpl 4.2.0__tar.gz

cloudxpl-4.2.0/PKG-INFO

@@ -0,0 +1,98 @@
+Metadata-Version: 2.4
+Name: cloudxpl
+Version: 4.2.0
+Summary: CloudXPL-Forge (CXF) — Cloud security assessment framework. 508 modules across 20 categories: AWS, Azure, GCP, OCI, Alibaba, Tencent, IBM, DigitalOcean, OVHcloud, Hetzner, Kubernetes, serverless, storage, multi-cloud, hypervisors (VMware ESXi/vCenter, Hyper-V, KVM/QEMU, Xen/Citrix, Nutanix, Firecracker, Kata, side-channel), VDI escape, PaaS escape, CI/CD runner escape, 100+ CVEs 2019-2026, VM/container/tenant escape, credential and network attack surfaces.
+Author-email: André Henrique <henrique.santos@uniaogeek.com.br>
+License: XSRL-1.0
+Project-URL: Homepage, https://github.com/mrhenrike/CloudXPL-Forge
+Project-URL: Repository, https://github.com/mrhenrike/CloudXPL-Forge
+Project-URL: Documentation, https://github.com/mrhenrike/CloudXPL-Forge/wiki
+Project-URL: Bug Tracker, https://github.com/mrhenrike/CloudXPL-Forge/issues
+Project-URL: Changelog, https://github.com/mrhenrike/CloudXPL-Forge/releases
+Keywords: security,pentesting,cloud-security,aws,azure,gcp,oci,oracle-cloud,alibaba-cloud,tencent-cloud,ibm-cloud,digitalocean,ovhcloud,hetzner,vmware,esxi,vcenter,hyper-v,kvm,qemu,citrix,nutanix,hypervisor,vm-escape,kubernetes,k8s,serverless,lambda,iam,s3,ssrf,imds,container-escape,privilege-escalation,credential-theft,bucket-exploit,blob-exploit,entra-id,aks,eks,gke,cloud-exploit,red-team,purple-team,cve,kev,rsa-securid,data-exfiltration,storage-attack,multi-cloud,xpl-forge,tenant-escape,guest-to-host,firecracker,kata-containers,vdi-escape,runc-escape,dirty-pipe,openslp,vmci,xen-xsa,remotefx,paas-escape,cicd-escape,github-actions,gitlab-ci,jenkins,terraform,azurescape,cloud-run,fargate,horizon,citrix-vda,avd,workspaces,sev-snp,tdx,side-channel,spectre,nitro-enclaves
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Operating System :: POSIX :: Linux
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Security
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+Requires-Dist: requests<3.0,>=2.31.0
+Requires-Dist: rich>=13.0
+Requires-Dist: dnspython>=2.4
+Requires-Dist: xpl-core>=0.1.0
+Provides-Extra: aws
+Requires-Dist: boto3>=1.34; extra == "aws"
+Provides-Extra: azure
+Requires-Dist: azure-identity>=1.15; extra == "azure"
+Requires-Dist: azure-mgmt-resource>=23.0; extra == "azure"
+Requires-Dist: azure-mgmt-storage>=21.0; extra == "azure"
+Requires-Dist: azure-mgmt-compute>=30.0; extra == "azure"
+Requires-Dist: azure-mgmt-network>=25.0; extra == "azure"
+Requires-Dist: azure-keyvault-secrets>=4.7; extra == "azure"
+Requires-Dist: msgraph-sdk>=1.0; extra == "azure"
+Provides-Extra: gcp
+Requires-Dist: google-cloud-storage>=2.14; extra == "gcp"
+Requires-Dist: google-cloud-resource-manager>=1.12; extra == "gcp"
+Requires-Dist: google-cloud-compute>=1.14; extra == "gcp"
+Requires-Dist: google-cloud-iam>=2.12; extra == "gcp"
+Requires-Dist: google-cloud-secret-manager>=2.16; extra == "gcp"
+Provides-Extra: k8s
+Requires-Dist: kubernetes>=29.0; extra == "k8s"
+Provides-Extra: oci
+Requires-Dist: oci>=2.120; extra == "oci"
+Provides-Extra: alibaba
+Requires-Dist: alibabacloud-credentials>=0.3; extra == "alibaba"
+Requires-Dist: alibabacloud-ecs20140526>=4.0; extra == "alibaba"
+Requires-Dist: alibabacloud-oss20190517>=1.0; extra == "alibaba"
+Provides-Extra: tencent
+Requires-Dist: tencentcloud-sdk-python>=3.0; extra == "tencent"
+Provides-Extra: ibm
+Requires-Dist: ibm-cloud-sdk-core>=3.16; extra == "ibm"
+Requires-Dist: ibm-cos-sdk>=2.13; extra == "ibm"
+Provides-Extra: digitalocean
+Requires-Dist: pydo>=0.8; extra == "digitalocean"
+Provides-Extra: ovh
+Requires-Dist: ovh>=1.1; extra == "ovh"
+Provides-Extra: hetzner
+Requires-Dist: hcloud>=2.0; extra == "hetzner"
+Provides-Extra: virt
+Requires-Dist: pyvmomi>=8.0; extra == "virt"
+Requires-Dist: libvirt-python>=10.0; extra == "virt"
+Provides-Extra: dev
+Requires-Dist: pytest>=7.0; extra == "dev"
+Requires-Dist: ruff>=0.4; extra == "dev"
+Requires-Dist: build>=1.0; extra == "dev"
+Provides-Extra: full
+Requires-Dist: boto3>=1.34; extra == "full"
+Requires-Dist: azure-identity>=1.15; extra == "full"
+Requires-Dist: azure-mgmt-resource>=23.0; extra == "full"
+Requires-Dist: azure-mgmt-storage>=21.0; extra == "full"
+Requires-Dist: azure-mgmt-compute>=30.0; extra == "full"
+Requires-Dist: azure-mgmt-network>=25.0; extra == "full"
+Requires-Dist: azure-keyvault-secrets>=4.7; extra == "full"
+Requires-Dist: msgraph-sdk>=1.0; extra == "full"
+Requires-Dist: google-cloud-storage>=2.14; extra == "full"
+Requires-Dist: google-cloud-resource-manager>=1.12; extra == "full"
+Requires-Dist: google-cloud-compute>=1.14; extra == "full"
+Requires-Dist: google-cloud-iam>=2.12; extra == "full"
+Requires-Dist: google-cloud-secret-manager>=2.16; extra == "full"
+Requires-Dist: kubernetes>=29.0; extra == "full"
+Requires-Dist: oci>=2.120; extra == "full"
+Requires-Dist: alibabacloud-credentials>=0.3; extra == "full"
+Requires-Dist: alibabacloud-ecs20140526>=4.0; extra == "full"
+Requires-Dist: alibabacloud-oss20190517>=1.0; extra == "full"
+Requires-Dist: tencentcloud-sdk-python>=3.0; extra == "full"
+Requires-Dist: ibm-cloud-sdk-core>=3.16; extra == "full"
+Requires-Dist: ibm-cos-sdk>=2.13; extra == "full"
+Requires-Dist: pydo>=0.8; extra == "full"
+Requires-Dist: ovh>=1.1; extra == "full"
+Requires-Dist: hcloud>=2.0; extra == "full"
+Requires-Dist: pyvmomi>=8.0; extra == "full"
+Requires-Dist: libvirt-python>=10.0; extra == "full"

cloudxpl-4.2.0/cloudxpl/__init__.py

@@ -0,0 +1,8 @@
+"""CloudXPL-Forge — Cloud security assessment framework."""
+
+__version__ = "4.2.0"
+__product__ = "CloudXPL-Forge"
+__cli__ = "cxf"
+
+PRODUCT = __product__
+CLI = __cli__

cloudxpl-4.2.0/cloudxpl/__main__.py

@@ -0,0 +1,188 @@
+"""CloudXPL-Forge CLI entrypoint."""
+
+from __future__ import annotations
+
+import argparse
+import sys
+
+from cloudxpl import __product__, __version__
+from cloudxpl.core.dispatcher import MODULE_MAP
+
+
+def _add_common(p: argparse.ArgumentParser) -> None:
+    p.add_argument("--target", "-t", help="Target URL/host")
+    p.add_argument("--output", "-o", default=".", help="Output directory")
+    p.add_argument("--json", action="store_true", help="JSON output")
+    p.add_argument("--verbose", "-v", action="store_true")
+
+
+def _build_parser() -> argparse.ArgumentParser:
+    p = argparse.ArgumentParser(
+        prog="cxf",
+        description=f"{__product__} v{__version__} — Cloud security assessment framework",
+    )
+    p.add_argument("--version", action="version", version=f"{__product__} {__version__}")
+
+    sub = p.add_subparsers(dest="command")
+
+    # --- AWS ---
+    aws_p = sub.add_parser("aws", help="AWS modules (IAM, S3, EC2, Lambda, EKS, RDS, ...)")
+    aws_p.add_argument("module", choices=sorted(MODULE_MAP["aws"]))
+    aws_p.add_argument("--profile", default=None, help="AWS CLI profile")
+    aws_p.add_argument("--region", default="us-east-1")
+    aws_p.add_argument("--role-arn", help="ARN to assume")
+    _add_common(aws_p)
+
+    # --- Azure ---
+    azure_p = sub.add_parser("azure", help="Azure modules (Entra, Blob, AKS, KeyVault, ...)")
+    azure_p.add_argument("module", choices=sorted(MODULE_MAP["azure"]))
+    azure_p.add_argument("--tenant-id", help="Azure tenant ID")
+    azure_p.add_argument("--subscription-id", help="Azure subscription ID")
+    azure_p.add_argument("--client-id", help="App/SP client ID")
+    _add_common(azure_p)
+
+    # --- GCP ---
+    gcp_p = sub.add_parser("gcp", help="GCP modules (IAM, Buckets, GKE, Cloud SQL, Cloud Armor, WIF, ...)")
+    gcp_p.add_argument("module", choices=sorted(MODULE_MAP["gcp"]))
+    gcp_p.add_argument("--project", help="GCP project ID")
+    gcp_p.add_argument("--sa-key", help="Service account key file")
+    _add_common(gcp_p)
+
+    # --- Kubernetes ---
+    k8s_p = sub.add_parser("k8s", help="Kubernetes/container modules (RBAC, pods, escape, ...)")
+    k8s_p.add_argument("module", choices=sorted(MODULE_MAP["k8s"]))
+    k8s_p.add_argument("--kubeconfig", help="Kubeconfig path")
+    k8s_p.add_argument("--context", help="Kubernetes context")
+    k8s_p.add_argument("--namespace", "-n", default="default")
+    _add_common(k8s_p)
+
+    # --- Serverless ---
+    sls_p = sub.add_parser("serverless", help="Serverless attack modules (Lambda, Functions, ...)")
+    sls_p.add_argument("module", choices=sorted(MODULE_MAP["serverless"]))
+    sls_p.add_argument("--provider", choices=["aws", "azure", "gcp"], default="aws")
+    sls_p.add_argument("--function-name", help="Target function")
+    _add_common(sls_p)
+
+    # --- Storage ---
+    sto_p = sub.add_parser("storage", help="Cloud storage attack modules (S3, GCS, Blob, ...)")
+    sto_p.add_argument("module", choices=sorted(MODULE_MAP["storage"]))
+    sto_p.add_argument("--provider", choices=["aws", "azure", "gcp", "all"], default="all")
+    sto_p.add_argument("--bucket", "-b", help="Bucket/container name")
+    sto_p.add_argument("--wordlist", "-w", help="Wordlist for brute-force")
+    _add_common(sto_p)
+
+    # --- Multi-cloud ---
+    multi_p = sub.add_parser("multi", help="Multi-cloud and cross-provider modules")
+    multi_p.add_argument("module", choices=sorted(MODULE_MAP["multi"]))
+    multi_p.add_argument("--providers", nargs="+", choices=["aws", "azure", "gcp", "oci", "alibaba", "tencent", "ibm"],
+                         default=["aws", "azure", "gcp"])
+    _add_common(multi_p)
+
+    # --- Credential ---
+    cred_p = sub.add_parser("cred", help="Credential discovery and abuse modules (RSA SecurID, MFA relay, ...)")
+    cred_p.add_argument("module", choices=sorted(MODULE_MAP["cred"]))
+    cred_p.add_argument("--scan-path", help="Path to scan for credentials")
+    _add_common(cred_p)
+
+    # --- Network ---
+    net_p = sub.add_parser("net", help="Cloud network attack modules (VPC, SG, DNS, ...)")
+    net_p.add_argument("module", choices=sorted(MODULE_MAP["net"]))
+    net_p.add_argument("--provider", choices=["aws", "azure", "gcp"], default="aws")
+    net_p.add_argument("--cidr", help="Target CIDR range")
+    _add_common(net_p)
+
+    # --- OCI (Oracle Cloud) ---
+    oci_p = sub.add_parser("oci", help="Oracle Cloud modules (OCI IAM, buckets, compute, CVEs, ...)")
+    oci_p.add_argument("module", choices=sorted(MODULE_MAP["oci"]))
+    oci_p.add_argument("--tenancy-ocid", help="OCI tenancy OCID")
+    oci_p.add_argument("--region", default="us-ashburn-1", help="OCI region")
+    oci_p.add_argument("--config-file", default="~/.oci/config", help="OCI config file path")
+    _add_common(oci_p)
+
+    # --- Virtualization / Hypervisors ---
+    virt_p = sub.add_parser("virt", help="Hypervisor modules (VMware, Hyper-V, KVM, QEMU, Citrix, Nutanix, ...)")
+    virt_p.add_argument("module", choices=sorted(MODULE_MAP["virt"]))
+    virt_p.add_argument("--vcenter-host", help="vCenter/ESXi host")
+    virt_p.add_argument("--hyperv-host", help="Hyper-V host")
+    virt_p.add_argument("--libvirt-uri", default="qemu:///system", help="Libvirt connection URI")
+    _add_common(virt_p)
+
+    # --- Alibaba Cloud ---
+    ali_p = sub.add_parser("alibaba", help="Alibaba Cloud modules (ECS, OSS, RAM, RDS, ...)")
+    ali_p.add_argument("module", choices=sorted(MODULE_MAP["alibaba"]))
+    ali_p.add_argument("--access-key-id", help="Alibaba Cloud AccessKey ID")
+    ali_p.add_argument("--region", default="cn-hangzhou", help="Alibaba Cloud region")
+    _add_common(ali_p)
+
+    # --- Tencent Cloud ---
+    tc_p = sub.add_parser("tencent", help="Tencent Cloud modules (COS, CVM, CAM, ...)")
+    tc_p.add_argument("module", choices=sorted(MODULE_MAP["tencent"]))
+    tc_p.add_argument("--secret-id", help="Tencent Cloud SecretId")
+    tc_p.add_argument("--region", default="ap-guangzhou", help="Tencent Cloud region")
+    _add_common(tc_p)
+
+    # --- IBM Cloud ---
+    ibm_p = sub.add_parser("ibm", help="IBM Cloud modules (COS, IAM, VPC, QRadar, CloudPak, ...)")
+    ibm_p.add_argument("module", choices=sorted(MODULE_MAP["ibm"]))
+    ibm_p.add_argument("--api-key", help="IBM Cloud API key")
+    ibm_p.add_argument("--region", default="us-south", help="IBM Cloud region")
+    _add_common(ibm_p)
+
+    # --- DigitalOcean ---
+    do_p = sub.add_parser("digitalocean", help="DigitalOcean modules (Droplets, Spaces, DOKS, ...)")
+    do_p.add_argument("module", choices=sorted(MODULE_MAP["digitalocean"]))
+    do_p.add_argument("--api-token", help="DigitalOcean API token")
+    do_p.add_argument("--region", default="nyc1", help="DigitalOcean region")
+    _add_common(do_p)
+
+    # --- OVHcloud ---
+    ovh_p = sub.add_parser("ovh", help="OVHcloud modules (OpenStack, vRack, Swift, IPMI, ...)")
+    ovh_p.add_argument("module", choices=sorted(MODULE_MAP["ovh"]))
+    ovh_p.add_argument("--app-key", help="OVH application key")
+    ovh_p.add_argument("--region", default="GRA", help="OVHcloud region")
+    _add_common(ovh_p)
+
+    # --- Hetzner ---
+    hetz_p = sub.add_parser("hetzner", help="Hetzner Cloud modules (servers, firewalls, floating IPs, ...)")
+    hetz_p.add_argument("module", choices=sorted(MODULE_MAP["hetzner"]))
+    hetz_p.add_argument("--api-token", help="Hetzner API token")
+    hetz_p.add_argument("--region", default="nbg1", help="Hetzner datacenter/region")
+    _add_common(hetz_p)
+
+    # --- VDI (Virtual Desktop Infrastructure) ---
+    vdi_p = sub.add_parser("vdi", help="VDI escape modules (Horizon, Citrix VDA, AVD, WorkSpaces, kiosk, ...)")
+    vdi_p.add_argument("module", choices=sorted(MODULE_MAP["vdi"]))
+    vdi_p.add_argument("--vdi-host", help="VDI broker/connection server host")
+    vdi_p.add_argument("--session-id", help="Target VDI session ID")
+    _add_common(vdi_p)
+
+    # --- PaaS (Platform-as-a-Service) ---
+    paas_p = sub.add_parser("paas", help="PaaS escape modules (App Service, ACI, Cloud Run, Fargate, Lambda, ...)")
+    paas_p.add_argument("module", choices=sorted(MODULE_MAP["paas"]))
+    paas_p.add_argument("--provider", choices=["aws", "azure", "gcp", "heroku", "railway"], default="aws")
+    paas_p.add_argument("--function-name", help="Target function/service name")
+    _add_common(paas_p)
+
+    # --- CI/CD ---
+    cicd_p = sub.add_parser("cicd", help="CI/CD runner escape modules (GitHub Actions, GitLab CI, Jenkins, Terraform, ...)")
+    cicd_p.add_argument("module", choices=sorted(MODULE_MAP["cicd"]))
+    cicd_p.add_argument("--runner-url", help="CI/CD runner or server URL")
+    cicd_p.add_argument("--token", help="CI/CD API token or runner token")
+    _add_common(cicd_p)
+
+    return p
+
+
+def main(argv: list[str] | None = None) -> int:
+    parser = _build_parser()
+    args = parser.parse_args(argv)
+    if not args.command:
+        parser.print_help()
+        return 0
+
+    from cloudxpl.core.dispatcher import dispatch
+    return dispatch(args)
+
+
+if __name__ == "__main__":
+    sys.exit(main())

cloudxpl-4.2.0/cloudxpl/core/credential.py

@@ -0,0 +1,37 @@
+"""Cloud credential management — provider-agnostic credential handling."""
+
+from __future__ import annotations
+
+from dataclasses import dataclass, field
+from typing import Any
+
+
+@dataclass
+class CloudCredential:
+    provider: str
+    identity: str
+    credential_type: str = "unknown"
+    access_key: str | None = None
+    secret_key: str | None = None
+    token: str | None = None
+    profile: str | None = None
+    region: str | None = None
+    project_id: str | None = None
+    subscription_id: str | None = None
+    extra: dict[str, Any] = field(default_factory=dict)
+
+    @property
+    def masked_secret(self) -> str:
+        if self.secret_key:
+            return self.secret_key[:4] + "****" + self.secret_key[-4:]
+        return "(none)"
+
+    def to_dict(self) -> dict[str, Any]:
+        return {
+            "provider": self.provider,
+            "identity": self.identity,
+            "credential_type": self.credential_type,
+            "region": self.region,
+            "project_id": self.project_id,
+            "subscription_id": self.subscription_id,
+        }