Is it safe to use this skill on production cloud environments?

Penetration testing should only be performed with explicit written authorization and within a defined scope. It is recommended to test in staging or dedicated audit environments first to avoid service disruption.

Does this skill require specific tools to be installed?

Yes, for full functionality you should have the AWS CLI, Azure PowerShell modules (Az, AzureAD, MSOnline), and the Google Cloud SDK (gcloud) installed, along with security tools like ScoutSuite or Pacu.

How does the skill handle authentication for testing?

The skill provides command patterns for authenticating via CLI profiles, service principals, and access tokens, including methods to test for MFA bypass or credential persistence.

Can this skill help with remediating security findings?

Yes, the skill includes a workflow phase specifically for remediation recommendations and hardening guidance tailored to each specific platform's best practices.

Which cloud providers are supported by this skill?

This skill provides comprehensive testing techniques for the three major cloud providers: Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP).

Cloud Penetration Testing

Name: Cloud Penetration Testing
Author: claudiodearaujo

byclaudiodearaujo

0•

セキュリティとテスト

Conducts comprehensive security audits and penetration tests across major cloud platforms including AWS, Azure, and GCP.

This skill empowers security professionals to perform end-to-end security assessments of cloud infrastructure. It provides structured workflows for reconnaissance, resource enumeration, and vulnerability exploitation across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). By leveraging industry-standard CLI tools and security frameworks, the skill identifies IAM misconfigurations, extracts sensitive secrets, and evaluates persistence risks, helping organizations harden their cloud-native environments against modern threats.

主な機能

01Multi-cloud support for AWS, Microsoft Azure, and Google Cloud Platform (GCP)

02Guidance for establishing and detecting persistence in cloud environments

03Techniques for secret extraction from Key Vaults, S3, and Lambda

04Structured workflows for reconnaissance and resource enumeration

05Identification of IAM misconfigurations and privilege escalation paths

060 GitHub stars

ユースケース

01Identifying publicly exposed storage buckets and misconfigured RDS snapshots in AWS

02Assessing GCP project-level IAM policies and service account permissions

03Conducting authorized security audits of enterprise Azure Active Directory and resource groups

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/izacenter cloud-penetration-testing

For use in Claude.ai and ChatGPT

Download Skill