discovered 03 Aug 2026
ThunderCloud
→ View on GitHubThunderCloud is a cloud exploit framework designed for penetration testing of AWS and Azure environments. It features modules for enumerating roles, extracting credentials from vulnerable Cognito endpoints, attacking S3 buckets, and phishing AWS SSO credentials. This tool facilitates various attacks, making it valuable for security professionals assessing cloud infrastructure vulnerabilities.