CloudSword (云鉴)
by wgpsec
CloudSword is a comprehensive open-source tool designed to help public cloud tenants quickly discover, test, and enhance the security of their cloud environments. It assists security personnel in understanding resource information, identifying potential vulnerabilities, and deploying defenses to improve cloud security.
Last updated: N/A
What is CloudSword (云鉴)?
CloudSword (云鉴) is an open-source tool designed to help public cloud tenants quickly discover cloud risks, test cloud risks, and enhance cloud protection capabilities. It supports multiple cloud providers including Alibaba Cloud, Tencent Cloud, Huawei Cloud, Baidu Cloud, and Qiniu Cloud.
How to use CloudSword (云鉴)?
CloudSword can be installed via HomeBrew or by downloading the binary package from the releases page. After installation, you can use the command-line interface to interact with the tool. Use the help
command to see available commands, use
to select a module, set
to configure parameters, and run
to execute the module. Detailed usage instructions can be found in the 云鉴使用手册.
Key features of CloudSword (云鉴)
Global Chinese output
Command completion hints
MSF-like usage logic
Credential-less operation (credentials do not need to be stored locally)
MCP protocol support (SSE and STDIO)
Use cases of CloudSword (云鉴)
Discovering cloud resource information
Identifying potential vulnerabilities in the cloud environment
Testing cloud security posture
Deploying defenses to enhance cloud security
Creating honey tokens for Tencent Cloud
FAQ from CloudSword (云鉴)
Why was CloudSword created?
Why was CloudSword created?
Refer to the 云鉴使用答疑 for details.
What are the future plans for CloudSword?
What are the future plans for CloudSword?
Refer to the 云鉴使用答疑 for details.
What are some common questions about CloudSword?
What are some common questions about CloudSword?
Refer to the 云鉴使用答疑 for details.
How to join the CloudSword discussion group?
How to join the CloudSword discussion group?
Add WgpSecBot on WeChat by scanning the QR code in the README and send the keyword '云鉴' to receive the group invitation link.
How to contribute to CloudSword?
How to contribute to CloudSword?
See the CONTRIBUTING guide for details on contributing code or ideas.