Conducts thorough security assessments and ethical hacking operations within Amazon Web Services environments.
This skill empowers Claude to guide users through complex AWS security audits and penetration tests, covering critical areas like IAM privilege escalation, S3 bucket enumeration, and Metadata SSRF exploitation. It provides structured workflows for identifying vulnerabilities, extracting credentials, and testing cloud infrastructure resilience using industry-standard tools like Pacu and Prowler. Whether you're performing a red team operation or a security audit, this skill offers the specific commands and methodologies needed to secure or evaluate AWS resources effectively.
主な機能
01Automated AWS metadata SSRF (IMDSv1 and IMDSv2) exploitation workflows
022,883 GitHub stars
03S3 bucket discovery, enumeration, and data exfiltration techniques
04IAM privilege escalation path discovery and permission enumeration
05Comprehensive guidance for using security tools like Pacu, Prowler, and ScoutSuite
06Lambda function exploitation and malicious code injection patterns
ユースケース
01Conducting authorized red team exercises on AWS infrastructure
02Auditing IAM policies for Shadow Admin permissions and security gaps
03Simulating real-world cloud attacks to test incident response and monitoring
