Cloud Container Attack Tool (CCAT)

Cloud Container Attack Tool (CCAT) is a security testing framework designed to assess the security posture of container environments across cloud platforms.

The tool supports testing container security in both AWS and Google Cloud Platform (GCP) environments. CCAT requires Python 3.5+ and Docker Engine to operate, with specific version compatibility tested on Docker Engine 19.03.1.

For AWS functionality, the tool requires a named profile configuration, while GCP operations need either a service account or access token for authentication. The tool can be installed from source code or used through a provided Docker image for simplified deployment.

CCAT is maintained by the Rhino Assessment Team and provides community support through Slack channels and Stack Overflow. The tool mounts local AWS configuration files into the Docker container during execution, which requires careful consideration of credential security.

The framework is designed for security professionals conducting authorized penetration testing and security assessments of containerized applications and infrastructure in cloud environments.