☁️ CloudExploit by Khulnasoft — Next‑Gen Cloud Security Scanning Platform

---

🔥 Overview

CloudExploit is a powerful multi‑cloud security scanning engine built for:

• ☁️ AWS, Azure, GCP, Oracle Cloud
• 🔐 Compliance auditing (HIPAA, PCI, CIS)
• ⚙️ CI/CD security automation
• 🤖 AI‑driven security workflows (future‑ready)

It detects misconfigurations, vulnerabilities, and risky policies across your cloud infrastructure.

---

🚀 New Capabilities (Enhanced Runtime Platform)

⚡ Accelerated Runtime Modes

CloudExploit supports multiple execution strategies:

Mode	Description
standard	Full scan, all plugins
fast	Parallel scan, optimized for speed
targeted	Plugin‑specific scanning
compliance	Compliance‑only execution
ci	Optimized for CI/CD pipelines
low-memory	Reduced resource usage

Example

./index.js --mode=fast

---

🧪 Emulator / Sandbox Execution Mode

Run scans without touching real cloud accounts:

./index.js --emulator=local

Use cases

• 🔍 Plugin development
• 🧪 Security testing
• 🎓 Training environments
• 🧱 CI sandbox validation

---

🌐 Web Frontend Dashboard

CloudExploit includes an optional web UI for real‑time visibility.

Features

• 📊 Live scan monitoring
• 🧠 Risk scoring visualization
• 📁 Historical scan explorer
• 📉 Compliance dashboards
• 🔐 Multi‑account view

Run the frontend

cd web
npm install
npm run dev

Open: http://localhost:3000

---

⚡ Quick Start

🧰 Local Install

git clone https://github.com/khulnasoft/cloudexploit.git
cd cloudexploit
npm install
./index.js -h

🐳 Docker

docker build . -t cloudexploit:latest

docker run cloudexploit:latest -h

docker run \
  -e AWS_ACCESS_KEY_ID=XX \
  -e AWS_SECRET_ACCESS_KEY=YY \
  cloudexploit:latest --compliance=pci

---

⚙️ Runtime Examples

Full Scan

./index.js

Fast Parallel Scan

./index.js --mode=fast

Compliance Scan

./index.js --compliance=pci

CI/CD Fail on Risk

./index.js --exit-code --ignore-ok

Save Output

./index.js --json=report.json --csv=report.csv

---

🔐 Supported Cloud Providers

• Amazon Web Services
• Microsoft Azure
• Google Cloud Platform
• Oracle Cloud Infrastructure
• GitHub

---

⚙️ Configuration

CloudExploit requires read‑only security audit access.

Setup credentials

• AWS → docs/aws.md
• Azure → docs/azure.md
• GCP → docs/gcp.md
• OCI → docs/oracle.md

Example config

azure: {
  application_id: process.env.AZURE_APPLICATION_ID,
  key_value: process.env.AZURE_KEY_VALUE,
  directory_id: process.env.AZURE_DIRECTORY_ID,
  subscription_id: process.env.AZURE_SUBSCRIPTION_ID
}

---

🧠 Architecture

CloudExploit uses a two‑phase scanning pipeline:

[ Collection Engine ]
        ↓
[ Data Normalizer ]
        ↓
[ Plugin Scanner Engine ]
        ↓
[ Risk Scoring + Compliance Mapper ]
        ↓
[ Output Engine / API / Web UI ]

---

🧩 Plugin System

Each plugin represents:

• A security control
• A misconfiguration detection rule
• A compliance mapping

Run a single plugin

./index.js --plugin acmValidation

---

🛠 Writing Plugins

See:

• docs/writing-plugins.md
• docs/writing-remediation.md

---

📤 Output Formats

Format	Usage
Console Table	default
JSON	--json=file.json
CSV	--csv=file.csv
JUnit XML	--junit=file.xml
Raw Collection	--collection=data.json

---

🔕 Suppression System

Suppress known acceptable risks:

--suppress pluginId:region:resourceId

Example

--suppress *:*:certificate/*

---

🧪 CI/CD Integration

Perfect for:

• GitHub Actions
• GitLab CI
• Jenkins
• DevSecOps pipelines

Example

./index.js --exit-code --ignore-ok --json=report.json

---

☁️ Hosted Version

Use the fully managed SaaS platform:

👉 https://cloud.khulnasoft.com/signup

---

🧭 Roadmap

• 🤖 AI risk scoring engine
• 🧠 LLM‑based remediation suggestions
• 🔗 SIEM & SOAR integrations
• 📡 Real‑time cloud event scanning
• 🛰 Attack path simulation engine

---

🤝 Contributing

We welcome contributions:

• Plugins
• Remediation scripts
• New cloud providers
• Performance optimizations

See .github/CONTRIBUTING.md

---

⚠️ Disclaimer

CloudExploit is intended for:

• Security auditing
• Compliance validation
• Defensive security research

Users must ensure legal authorization before scanning cloud environments.

---

💙 Credits

Built with ❤️ by Khulnasoft Security Team