mrknow001/aliyun-accesskey-Tools

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1232 stars · 174 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Python tool for exploiting leaked Alibaba Cloud (Aliyun) AccessKeys: it enumerates ECS hosts associated with a key and enables remote command execution, including OSS-related operations. It is aimed at security testing scenarios such as demonstrating the impact of exposed cloud credentials.

Use cases

• find hosts belonging to a leaked aliyun accesskey
• execute remote commands on aliyun ecs instances via accesskey
• test impact of exposed aliyun access keys
• enumerate aliyun oss buckets with a leaked key
• demonstrate accesskey leak to getshell during pentest

When to choose

• you are doing an authorized penetration test involving leaked Aliyun credentials
• you need to quickly assess what resources a leaked Aliyun AccessKey can reach
• you want a simple Python tool to demonstrate cloud credential abuse

When to avoid

• you need a general-purpose cloud security scanner or CSPM tool
• you want actively developed software with ongoing maintenance and a license
• you lack authorization to test the target Aliyun account
• you need support for other cloud providers

Facets

cli-tool · maturity maintenance

security penetration-testing cli security penetration-testing cloud-computing python windows cli aliyun accesskey cloud-security offensive-security post-exploitation oss red-team linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="mrknow001/aliyun-accesskey-Tools")