Is this skill meant for offensive or defensive security?

It is designed for both. While it uses penetration testing techniques to find vulnerabilities, its primary goal is to help professionals harden infrastructure and improve cloud security posture.

Does it handle automated exploitation?

The skill provides the necessary commands and logic for exploitation of known misconfigurations, but it requires manual execution and authorization from the user.

Does this skill require specific tools to be installed?

Yes, to execute the workflows, you will need the respective cloud CLIs (AWS CLI, Az PowerShell/CLI, and GCP SDK) along with auditing tools like ScoutSuite or Pacu.

Cloud Penetration Testing

Name: Cloud Penetration Testing
Author: claudiodearaujo

byclaudiodearaujo

0•

Seguridad y Pruebas

Conducts comprehensive security assessments and ethical hacking across AWS, Azure, and Google Cloud environments.

This skill provides a specialized framework for performing authorized security audits across the three major cloud providers: Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). It equips security professionals with standardized workflows for reconnaissance, identity enumeration, misconfiguration exploitation, and persistence testing. By guiding users through complex CLI commands and platform-specific attack vectors, it helps identify critical vulnerabilities in IAM policies, storage buckets, and virtual machine configurations while offering actionable remediation strategies for infrastructure hardening.

Características Principales

01Advanced misconfiguration exploitation and secret extraction techniques

02Automated enumeration of storage, compute, and serverless resources

03Identity and Access Management (IAM) vulnerability testing

040 GitHub stars

05Multi-cloud reconnaissance and automated resource discovery

06Cross-platform persistence and privilege escalation workflows

Casos de Uso

01Validating the effectiveness of IAM policies and network security groups

02Identifying leaked credentials and exposed secrets in cloud metadata services

03Performing authorized security audits of corporate cloud infrastructure

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/izacenter cloud-penetration-testing

For use in Claude.ai and ChatGPT

Download Skill