Which privilege escalation methods does this skill check for?

It covers 21+ methods including iam:CreatePolicyVersion, iam:PassRole with Lambda/EC2, unsafe cross-account trust relationships, and administrative policy attachments.

Can this skill help with principle of least privilege compliance?

Yes, by identifying over-privileged roles and potential attack paths, it provides the necessary insights to refine IAM policies to meet least privilege standards.

Is this skill intended for unauthorized testing?

No. This skill is strictly for authorized security assessments. You must have explicit written permission before testing any AWS account or environment.

What tools are required to use this skill effectively?

You will need the AWS CLI, Pacu, CloudFox, and Principal Mapper (PMapper) installed and configured with authorized test credentials.

AWS Privilege Escalation Assessment

Name: AWS Privilege Escalation Assessment
Author: mukul975

bymukul975

•

3,695

•

安全与测试

Identifies and validates AWS IAM misconfigurations to uncover potential privilege escalation paths using industry-standard security tools.

This skill provides a structured framework for performing authorized security assessments of AWS Identity and Access Management (IAM) configurations. It guides users through the process of enumerating baseline permissions, utilizing automated scanners like Pacu and CloudFox, and mapping complex relationship graphs with Principal Mapper to identify critical vulnerabilities such as unauthorized administrative access, confused deputy risks, and cross-account trust issues. Ideal for penetration testers and cloud security engineers, it ensures that IAM policies strictly adhere to the principle of least privilege while providing actionable remediation strategies and standardized reporting templates.

主要功能

01Automated IAM vulnerability scanning with Pacu

02Attack surface discovery for Lambda, EC2, and Glue services

03Graph-based escalation path mapping using Principal Mapper

043,695 GitHub stars

05Cross-account trust relationship and role assumption analysis

06Standardized reporting for security findings and remediation

使用场景

01Validating IAM policies in CI/CD pipelines before deployment

02Conducting authorized penetration tests of AWS cloud environments

03Assessing the potential blast radius of compromised AWS credentials

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills performing-aws-privilege-escalation-assessment

For use in Claude.ai and ChatGPT

Download Skill

主要功能

01Automated IAM vulnerability scanning with Pacu

02Attack surface discovery for Lambda, EC2, and Glue services

03Graph-based escalation path mapping using Principal Mapper

043,695 GitHub stars

05Cross-account trust relationship and role assumption analysis

06Standardized reporting for security findings and remediation

使用场景

01Validating IAM policies in CI/CD pipelines before deployment

02Conducting authorized penetration tests of AWS cloud environments

03Assessing the potential blast radius of compromised AWS credentials

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills performing-aws-privilege-escalation-assessment

For use in Claude.ai and ChatGPT

Download Skill