What tools does this skill support?

The skill provides optimized workflows for industry-standard security tools including Pacu, Prowler, ScoutSuite, SkyArk, and the AWS CLI.

Can this skill help with IAM permission auditing?

Absolutely. It features detailed procedures for listing user policies, identifying inline policies, and discovering 'Shadow Admin' permissions that grant administrative access.

Does it provide guidance on maintaining stealth during a pentest?

Yes, it covers techniques for managing CloudTrail logging and modifying user-agents to avoid triggering GuardDuty alerts.

Does it cover both IMDSv1 and IMDSv2 metadata endpoints?

Yes, it includes specific commands and logic for exploiting SSRF on legacy IMDSv1 and handling the token-based requirements of IMDSv2.

AWS Penetration Testing & Security Assessment

Name: AWS Penetration Testing & Security Assessment
Author: claudiodearaujo

byclaudiodearaujo

0•

Seguridad y Pruebas

Performs comprehensive security assessments and penetration testing across AWS environments to identify vulnerabilities and privilege escalation paths.

This skill provides Claude with specialized knowledge to conduct professional security audits and red team operations within Amazon Web Services. It covers critical security domains including IAM permission analysis, exploiting SSRF via metadata endpoints (IMDSv1/v2), S3 bucket enumeration, and advanced privilege escalation techniques. Designed for security researchers and cloud architects, it provides step-by-step guidance on utilizing industry-standard tools like Pacu, Prowler, and ScoutSuite to identify and remediate complex cloud misconfigurations.

Características Principales

01Automated IAM permission enumeration and shadow admin discovery

02Comprehensive S3 bucket discovery and data extraction techniques

03Techniques for log obfuscation and CloudTrail management for audit evasion

04Detailed metadata SSRF exploitation workflows for IMDSv1 and IMDSv2

05Advanced privilege escalation mapping for Lambda, EC2, and SSM

060 GitHub stars

Casos de Uso

01Identifying misconfigured S3 buckets and public-facing resources before they are exploited

02Conducting formal red team engagements and offensive security research in AWS

03Auditing complex IAM policies to identify and prevent unauthorized privilege escalation

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro-front aws-penetration-testing

For use in Claude.ai and ChatGPT

Download Skill

Características Principales

01Automated IAM permission enumeration and shadow admin discovery

02Comprehensive S3 bucket discovery and data extraction techniques

03Techniques for log obfuscation and CloudTrail management for audit evasion

04Detailed metadata SSRF exploitation workflows for IMDSv1 and IMDSv2

05Advanced privilege escalation mapping for Lambda, EC2, and SSM

060 GitHub stars

Casos de Uso

01Identifying misconfigured S3 buckets and public-facing resources before they are exploited

02Conducting formal red team engagements and offensive security research in AWS

03Auditing complex IAM policies to identify and prevent unauthorized privilege escalation

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro-front aws-penetration-testing

For use in Claude.ai and ChatGPT

Download Skill