huawei-pentesting

SUSPICIOUS: The instructions align with cloud penetration testing, and the documented network calls target Huawei Cloud directly, so this is not confirmed malware. Nevertheless, the skill provides broad, actionable credential extraction, data theft, privilege escalation, persistence, traffic manipulation and destructive KMS capabilities without explicit authorization or approval safeguards.

This is an actionable offensive guide for Huawei Cloud services, including credential and secret discovery, node metadata access, privileged-container host access, function-code replacement, and KMS-based data encryption or recovery denial. It references cce.{region}.myhuaweicloud[.]com, functiongraph.{region}.myhuaweicloud[.]com, lts.{region}.myhuaweicloud[.]com, kms.{region}.myhuaweicloud[.]com, and 169[.]254[.]169[.]254, and targets X-Auth-Token, cloud AK/SK/securitytoken credentials, and application secrets. It is documentation rather than automatically executing malware, but its procedures can cause severe compromise or data loss when used with sufficient permissions.

该文件不是可执行的软件包代码，而是一份明确面向云环境攻击的操作指南。其内容展示了凭据获取、敏感数据下载、访问控制放宽、数据库账户创建、备份获取和负载均衡流量劫持等高风险行为。未发现代码级恶意载荷或混淆，但文档所描述的操作具有明显的未授权访问和数据泄露风险。