Can this skill help identify IAM privilege escalation paths?

Yes, it specifically focuses on identifying 'Shadow Admin' permissions such as iam:CreateAccessKey or iam:PassRole that could lead to unauthorized administrative access.

Is this skill suitable for defensive security teams?

Absolutely. Blue teams can use these penetration testing patterns to proactively audit their own infrastructure and verify that security controls are functioning as intended.

How does this skill help with S3 bucket security?

It provides workflows for bucket discovery, enumerating public permissions, and testing for data exposure risks using the AWS CLI and specialized search tools.

What tools does this skill recommend for AWS pentesting?

The skill provides guidance and command patterns for industry-standard tools including Pacu, Prowler, ScoutSuite, SkyArk, and Principal Mapper.

Does it support the latest AWS Instance Metadata Service (IMDSv2)?

Yes, it includes specific techniques for both IMDSv1 and the token-based IMDSv2 to test for SSRF vulnerabilities in EC2 environments.

AWS Penetration Testing

Name: AWS Penetration Testing
Author: claudiodearaujo

byclaudiodearaujo

•

Seguridad y Pruebas

Provides specialized guidance and automated patterns for auditing and penetration testing Amazon Web Services (AWS) cloud environments.

This skill equips Claude with specialized knowledge for conducting thorough security assessments of AWS environments, covering critical stages of red team engagements and security audits. It provides structured workflows for IAM enumeration, SSRF metadata exploitation (IMDSv1/v2), and identifying 'Shadow Admin' privilege escalation paths. By integrating best practices for tools like Pacu, Prowler, and ScoutSuite, the skill helps security professionals and developers identify misconfigurations in S3 buckets, Lambda functions, and EC2 instances to harden cloud infrastructure against real-world attacks.

Características Principales

01Lambda function code extraction and security analysis

021 GitHub stars

03Automated security auditing workflows using Prowler and ScoutSuite

04IAM enumeration and automated privilege escalation discovery

05EC2 metadata service (IMDSv1/v2) SSRF exploitation techniques

06S3 bucket discovery and permission configuration testing

Casos de Uso

01Conducting authorized red team engagements on AWS cloud infrastructure

02Performing comprehensive security audits to ensure AWS compliance and hardening

03Identifying and remediating IAM 'Shadow Admin' permissions and misconfigurations

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro aws-penetration-testing

For use in Claude.ai and ChatGPT

Download Skill