📦
content-creator
88브랜드 일관성을 유지하는 마케팅 콘텐츠 만들기
마케팅 팀에는 채널 전반에서 일관성을 유지하는 콘텐츠가 필요합니다. 이 스킬은 브랜드 보이스와 SEO에 맞춰 콘텐츠를 기획, 작성, 분석, 최적화하는 데 도움을 줍니다.
글쓰기 및 콘텐츠 보기
스킬 cloud-penetration-testing
📦
cloud-penetration-testing
v1.1 콘텐츠 리비전 r1 치명적 ⚙️ 외부 명령어🌐 네트워크 접근📁 파일 시스템 접근
클라우드 보안 태세 평가
클라우드 팀은 AWS, Azure, GCP 노출을 테스트하기 위한 체계적인 방법이 필요합니다. 이 스킬은 승인된 클라우드 평가 단계, 리소스 열거, 개선 중심 보고를 정리합니다.
지원: Claude Codex Code(CC)
이 Skill을 자동으로 설치하지 마세요.
공식 정책에 따라 설치 작업 전에 운영자 검토가 필요합니다.
내 에이전트로 설치
이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.
에이전트 요청
Review the Skillstore skill "cloud-penetration-testing" from https://skillstore.io/skills/sickn33-cloud-penetration-testing.md and its manifest at https://skillstore.io/api/skills/sickn33-cloud-penetration-testing/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.
에이전트가 읽기 쉬운 리소스
AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.
테스트해 보기
"cloud-penetration-testing" 사용 중입니다. 승인된 AWS, Azure, GCP 클라우드 보안 평가를 계획하세요.
예상 결과:
- 범위 및 승인 체크리스트.
- 공급자별 열거 계획.
- 증거 처리 및 로깅 메모.
- 개선 섹션이 포함된 보고서 구조.
"cloud-penetration-testing" 사용 중입니다. 클라우드 IAM 검토 결과를 요약하세요.
예상 결과:
- 고위험 관리자 경로 및 노출된 서비스 계정.
- 중간 위험의 과도한 권한 및 오래된 자격 증명.
- 권장되는 최소 권한 변경 사항 및 소유자 할당.
"cloud-penetration-testing" 사용 중입니다. 클라우드 스토리지 관찰 사항을 보고서에 바로 사용할 수 있는 발견 사항으로 전환하세요.
예상 결과:
- 영향을 받는 버킷 및 데이터 민감도 요약.
- 액세스 제어 문제 설명.
- 비즈니스 영향 설명.
- 개선 단계 및 검증 계획.
보안 감사
치명적v5 • 2026. 7. 9. 버전별 보고서 열기
Sections are framed as authorized cloud testing, but they include actionable credential harvesting, metadata token retrieval, password spraying, and persistence workflows. I confirmed findings tied to those workflows and dismissed syntax-only Markdown, benign URL, and encryption-status false positives. No prompt injection evidence was found in the reviewed files.
2
스캔된 파일
821
분석된 줄 수
67
검토 항목
0
오탐 무시됨
확인된 보안 우려 사항 (24)
치명적
GCP credentials directory
sudo cp -r /home/user/.config/gcloud ~/.config
The command copies the GCP credentials directory from another home profile. This is direct credential material access.
치명적
Credential JSON file
gcloud auth activate-service-account --key-file compromised-sa.json
The skill authenticates with a file named compromised-sa.json in a service account compromise example. The context confirms use of stolen credential material.
치명적
Malware type keywords
# Create backdoor service principal
The line explicitly says to create a backdoor service principal. That is persistence guidance in a cloud tenant.
치명적
Malware type keywords
# Create backdoor access key
The line explicitly says to create a backdoor access key. That is persistence guidance for continued AWS access.
치명적
Pipe to shell pattern
curl https://sdk.cloud.google.com | bash
The command pipes a remote installer script directly to bash. This executes network-delivered code without verification.
치명적
[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
This combination is common in credential stealers and RATs
The skill combines command execution, metadata-service access, credential files, password spraying, and persistence guidance. That combination is dangerous in a marketplace skill.
치명적
SKILL.md:167-171SKILL.md:257-266SKILL.md:350-353references/advanced-cloud-scripts.md:116-124references/advanced-cloud-scripts.md:191-204
Credential Harvesting and Data Extraction Workflow
The skill instructs users to dump Key Vault secrets, Lambda environment variables, cloud metadata tokens, service account keys, and local GCP credential stores.
Multiple sections explicitly retrieve secrets, metadata tokens, environment variables, and credential stores. The behavior is credential extraction, not only benign enumeration.
치명적
Persistence and Backdoor Account Creation Guidance
The skill provides workflows to create backdoor service principals, access keys, admin users, and directory role assignments for continued access.
The text names the activity as backdoor creation and shows account, key, and administrator-role creation steps. This is clear persistence guidance.
확인된 24건 모두 보기
높음
System reconnaissance
az ad sp credential reset --id <app_id>
The command resets a service principal credential. In the attack path, this supports account takeover and persistence.
높음
System reconnaissance
az ad sp credential list --id <app_id>
The command lists service principal credentials after reset. The surrounding workflow uses those credentials for privileged login.
높음
Credential JSON file
gcloud auth activate-service-account --key-file creds.json
The skill authenticates with a service account key file named creds.json. Such JSON key files contain sensitive cloud credentials.
높음
SQLite database file
sudo find /home -name "credentials.db"
The command searches home directories for credentials.db. In the GCP context, this indicates credential database discovery.
높음
System reconnaissance
az keyvault secret show --id <URI>
The command displays a Key Vault secret by URI. In this exploitation section, it is direct secret retrieval, not routine inventory.
높음
[HEURISTIC] SUSPICIOUS COMBINATION: Filesystem + Credentials + Network
This combination could indicate credential harvesting and exfiltration
The skill combines filesystem access, credential stores, cloud APIs, and network endpoints. The context supports credential harvesting and exfiltration risk.
높음
Password Spraying With Evasion-Oriented Infrastructure
The skill includes password spraying steps, valid credential collection, and FireProx IP rotation guidance for Azure and Office 365 authentication testing.
The examples invoke password spraying, collect valid credentials, and include IP rotation infrastructure. These are strong indicators of credential attack workflows.
낮음
System reconnaissance
$subscriptionid = $s.SubscriptionId
The script selects or records Azure subscription identifiers while iterating accounts. This is legitimate in scope but still cloud reconnaissance.
낮음
System reconnaissance
Select-AzSubscription -Subscription $subscriptionid
The script selects or records Azure subscription identifiers while iterating accounts. This is legitimate in scope but still cloud reconnaissance.
낮음
System reconnaissance
$subscriptionid = $s.SubscriptionId
The script selects or records Azure subscription identifiers while iterating accounts. This is legitimate in scope but still cloud reconnaissance.
낮음
System reconnaissance
Select-AzSubscription -Subscription $subscriptionid
The script selects or records Azure subscription identifiers while iterating accounts. This is legitimate in scope but still cloud reconnaissance.
낮음
System reconnaissance
$subscriptionid = $s.SubscriptionId
The script selects or records Azure subscription identifiers while iterating accounts. This is legitimate in scope but still cloud reconnaissance.
낮음
System reconnaissance
Select-AzSubscription -Subscription $subscriptionid
The script selects or records Azure subscription identifiers while iterating accounts. This is legitimate in scope but still cloud reconnaissance.
낮음
Network reconnaissance
aws ec2 describe-instances --query=Reservations[].Instances[].PublicIpAddress --region $r | jq -r '.
The command enumerates public cloud addresses or database DNS names. That is network reconnaissance within a cloud assessment workflow.
낮음
Network reconnaissance
aws rds describe-db-instances --query=DBInstances[*].Endpoint.Address --region $r | jq -r '.[]' >> r
The command enumerates public cloud addresses or database DNS names. That is network reconnaissance within a cloud assessment workflow.
낮음
Network reconnaissance
aws ec2 describe-instances --query=Reservations[].Instances[].PublicIpAddress --region $region | jq
The command enumerates EC2 public IP addresses across regions. This is cloud network reconnaissance within the skill workflow.
기능 검토 항목 (67)
이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.
치명적
PowerShell invocation
```powershell
The PowerShell block accesses Azure metadata and managed identity token endpoints. That can expose cloud credentials from a VM.
치명적
AWS/Azure metadata endpoint
Invoke-WebRequest -Uri 'http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01
The snippet accesses the Azure instance metadata service to retrieve identity tokens or instance metadata. That can expose cloud credentials from a compromised VM.
치명적
AWS/Azure metadata endpoint
$instance = Invoke-WebRequest -Uri 'http://169.254.169.254/metadata/instance?api-version=2018-02-01'
The snippet accesses the Azure instance metadata service to retrieve identity tokens or instance metadata. That can expose cloud credentials from a compromised VM.
치명적
Hardcoded URL
Invoke-WebRequest -Uri 'http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01
The hardcoded URL is the cloud metadata service, not a normal public endpoint. Accessing it can disclose identity tokens and sensitive instance data.
치명적
Hardcoded URL
$instance = Invoke-WebRequest -Uri 'http://169.254.169.254/metadata/instance?api-version=2018-02-01'
The hardcoded URL is the cloud metadata service, not a normal public endpoint. Accessing it can disclose identity tokens and sensitive instance data.
치명적
Hardcoded IP address
Invoke-WebRequest -Uri 'http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01
The hardcoded IP is 169.254.169.254, the cloud metadata service. The surrounding commands retrieve managed identity or instance metadata.
치명적
Hardcoded IP address
$instance = Invoke-WebRequest -Uri 'http://169.254.169.254/metadata/instance?api-version=2018-02-01'
The hardcoded IP is 169.254.169.254, the cloud metadata service. The surrounding commands retrieve managed identity or instance metadata.
치명적
Shell command substitution
TOKEN=$(curl -X PUT "http://169.254.169.254/latest/api/token" -H "X-aws-ec2-metadata-token-ttl-secon
The command substitution stores an IMDSv2 token obtained from the AWS metadata service. That token enables subsequent metadata access for role credential discovery.
치명적
PowerShell invocation
```powershell
The PowerShell persistence block creates a backdoor service principal and adds it to Global Admin. This is explicit persistence guidance.
치명적
sudo privilege escalation
sudo find /home -name "credentials.db"
The sudo command searches all home directories for GCP credential databases. That is privileged credential discovery across user profiles.
치명적
sudo privilege escalation
sudo cp -r /home/user/.config/gcloud ~/.config
The sudo command copies a user GCP configuration directory into the current user profile. That can transfer active cloud credentials.
치명적
AWS/Azure metadata endpoint
curl http://169.254.169.254/latest/meta-data/
The finding points to AWS or Azure metadata-service access. In this context, the skill uses it to retrieve metadata or role credentials from cloud instances.
치명적
AWS/Azure metadata endpoint
curl http://169.254.169.254/latest/meta-data/iam/security-credentials/
The finding points to AWS or Azure metadata-service access. In this context, the skill uses it to retrieve metadata or role credentials from cloud instances.
치명적
AWS/Azure metadata endpoint
TOKEN=$(curl -X PUT "http://169.254.169.254/latest/api/token" -H "X-aws-ec2-metadata-token-ttl-secon
The finding points to AWS or Azure metadata-service access. In this context, the skill uses it to retrieve metadata or role credentials from cloud instances.
치명적
AWS/Azure metadata endpoint
curl http://169.254.169.254/latest/meta-data/profile -H "X-aws-ec2-metadata-token: $TOKEN"
The finding points to AWS or Azure metadata-service access. In this context, the skill uses it to retrieve metadata or role credentials from cloud instances.
치명적
AWS/Azure metadata endpoint
| Metadata | `curl http://169.254.169.254/latest/meta-data/` |
The finding points to AWS or Azure metadata-service access. In this context, the skill uses it to retrieve metadata or role credentials from cloud instances.
치명적
AWS/Azure metadata endpoint
| AWS | `http://169.254.169.254/latest/meta-data/` |
The finding points to AWS or Azure metadata-service access. In this context, the skill uses it to retrieve metadata or role credentials from cloud instances.
치명적
AWS/Azure metadata endpoint
| Azure | `http://169.254.169.254/metadata/instance?api-version=2018-02-01` |
The finding points to AWS or Azure metadata-service access. In this context, the skill uses it to retrieve metadata or role credentials from cloud instances.
치명적
AWS/Azure metadata endpoint
| Metadata service blocked | Check IMDSv2 (AWS); verify instance role; check firewall for 169.254.16
The finding points to AWS or Azure metadata-service access. In this context, the skill uses it to retrieve metadata or role credentials from cloud instances.
치명적
GCP metadata endpoint
curl "http://metadata.google.internal/computeMetadata/v1/?recursive=true&alt=text" -H "Metadata-Flav
The finding points to the GCP metadata service. The surrounding section retrieves metadata and service-account scopes from compute instances.
치명적
GCP metadata endpoint
curl http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/scopes -H
The finding points to the GCP metadata service. The surrounding section retrieves metadata and service-account scopes from compute instances.
치명적
GCP metadata endpoint
| Metadata | `curl -H "Metadata-Flavor: Google" http://metadata.google.internal/...` |
The finding points to the GCP metadata service. The surrounding section retrieves metadata and service-account scopes from compute instances.
치명적
GCP metadata endpoint
| GCP | `http://metadata.google.internal/computeMetadata/v1/` |
The finding points to the GCP metadata service. The surrounding section retrieves metadata and service-account scopes from compute instances.
치명적
Hardcoded URL
curl https://sdk.cloud.google.com | bash
The URL is used in a curl-to-bash installation command. The risk is remote script execution from a network endpoint.
치명적
Hardcoded URL
curl http://169.254.169.254/latest/meta-data/
The hardcoded URL is a cloud metadata endpoint or metadata command. These endpoints can reveal identity, scope, or credential material from instances.
치명적
Hardcoded URL
curl http://169.254.169.254/latest/meta-data/iam/security-credentials/
The hardcoded URL is a cloud metadata endpoint or metadata command. These endpoints can reveal identity, scope, or credential material from instances.
치명적
Hardcoded URL
TOKEN=$(curl -X PUT "http://169.254.169.254/latest/api/token" -H "X-aws-ec2-metadata-token-ttl-secon
The hardcoded URL is a cloud metadata endpoint or metadata command. These endpoints can reveal identity, scope, or credential material from instances.
치명적
Hardcoded URL
curl http://169.254.169.254/latest/meta-data/profile -H "X-aws-ec2-metadata-token: $TOKEN"
The hardcoded URL is a cloud metadata endpoint or metadata command. These endpoints can reveal identity, scope, or credential material from instances.
치명적
Hardcoded URL
curl "http://metadata.google.internal/computeMetadata/v1/?recursive=true&alt=text" -H "Metadata-Flav
The hardcoded URL is a cloud metadata endpoint or metadata command. These endpoints can reveal identity, scope, or credential material from instances.
치명적
Hardcoded URL
curl http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/scopes -H
The hardcoded URL is a cloud metadata endpoint or metadata command. These endpoints can reveal identity, scope, or credential material from instances.
치명적
Hardcoded URL
| Metadata | `curl http://169.254.169.254/latest/meta-data/` |
The hardcoded URL is a cloud metadata endpoint or metadata command. These endpoints can reveal identity, scope, or credential material from instances.
치명적
Hardcoded URL
| Metadata | `curl -H "Metadata-Flavor: Google" http://metadata.google.internal/...` |
The hardcoded URL is a cloud metadata endpoint or metadata command. These endpoints can reveal identity, scope, or credential material from instances.
치명적
Hardcoded URL
| AWS | `http://169.254.169.254/latest/meta-data/` |
The hardcoded URL is a cloud metadata endpoint or metadata command. These endpoints can reveal identity, scope, or credential material from instances.
치명적
Hardcoded URL
| Azure | `http://169.254.169.254/metadata/instance?api-version=2018-02-01` |
The hardcoded URL is a cloud metadata endpoint or metadata command. These endpoints can reveal identity, scope, or credential material from instances.
치명적
Hardcoded URL
| GCP | `http://metadata.google.internal/computeMetadata/v1/` |
The hardcoded URL is a cloud metadata endpoint or metadata command. These endpoints can reveal identity, scope, or credential material from instances.
치명적
Hardcoded IP address
curl http://169.254.169.254/latest/meta-data/
The hardcoded IP is the cloud metadata service address. The skill context uses it for metadata or credential discovery.
치명적
Hardcoded IP address
curl http://169.254.169.254/latest/meta-data/iam/security-credentials/
The hardcoded IP is the cloud metadata service address. The skill context uses it for metadata or credential discovery.
치명적
Hardcoded IP address
TOKEN=$(curl -X PUT "http://169.254.169.254/latest/api/token" -H "X-aws-ec2-metadata-token-ttl-secon
The hardcoded IP is the cloud metadata service address. The skill context uses it for metadata or credential discovery.
치명적
Hardcoded IP address
curl http://169.254.169.254/latest/meta-data/profile -H "X-aws-ec2-metadata-token: $TOKEN"
The hardcoded IP is the cloud metadata service address. The skill context uses it for metadata or credential discovery.
치명적
Hardcoded IP address
| Metadata | `curl http://169.254.169.254/latest/meta-data/` |
The hardcoded IP is the cloud metadata service address. The skill context uses it for metadata or credential discovery.
치명적
Hardcoded IP address
| AWS | `http://169.254.169.254/latest/meta-data/` |
The hardcoded IP is the cloud metadata service address. The skill context uses it for metadata or credential discovery.
치명적
Hardcoded IP address
| Azure | `http://169.254.169.254/metadata/instance?api-version=2018-02-01` |
The hardcoded IP is the cloud metadata service address. The skill context uses it for metadata or credential discovery.
치명적
Hardcoded IP address
| Metadata service blocked | Check IMDSv2 (AWS); verify instance role; check firewall for 169.254.16
The hardcoded IP is the cloud metadata service address. The skill context uses it for metadata or credential discovery.
치명적
Hidden file in home directory
sudo cp -r /home/user/.config/gcloud ~/.config
The path targets /home/user/.config/gcloud and copies it into ~/.config. This is direct access to hidden cloud credential configuration.
치명적
Hidden file access
sudo cp -r /home/user/.config/gcloud ~/.config
The hidden path is the GCP configuration directory. Copying it can expose OAuth tokens and service account state.
높음
PowerShell invocation
```powershell
The PowerShell block contains cloud enumeration or export automation across subscriptions. These commands can expose cloud assets and operational data if run out of scope.
높음
PowerShell invocation
```powershell
The PowerShell block contains cloud enumeration or export automation across subscriptions. These commands can expose cloud assets and operational data if run out of scope.
높음
PowerShell invocation
```powershell
The PowerShell block contains cloud enumeration or export automation across subscriptions. These commands can expose cloud assets and operational data if run out of scope.
높음
PowerShell invocation
```powershell
The PowerShell block contains cloud enumeration or export automation across subscriptions. These commands can expose cloud assets and operational data if run out of scope.
높음
PowerShell invocation
```powershell
The PowerShell block implements device-code authentication or token retrieval. In this context, it can obtain cloud access tokens.
높음
PowerShell invocation
```powershell
The PowerShell block implements device-code authentication or token retrieval. In this context, it can obtain cloud access tokens.
높음
PowerShell invocation
## Password Spraying with Az PowerShell
The section is password spraying with Azure PowerShell and writes valid credentials. This is actionable credential attack guidance.
높음
PowerShell invocation
```powershell
The section is password spraying with Azure PowerShell and writes valid credentials. This is actionable credential attack guidance.
높음
Hardcoded URL
-Uri "https://login.microsoftonline.com/common/oauth2/devicecode?api-version=1.0" `
The URL initiates an OAuth device-code login flow. In this pentesting context, that can be used to obtain cloud access tokens.
높음
Hardcoded URL
-Uri "https://login.microsoftonline.com/Common/oauth2/token?api-version=1.0" `
The URL retrieves OAuth tokens after device-code authentication. The surrounding script stores tokens for cloud access.
높음
Hardcoded URL
az rest --method POST --uri https://graph.microsoft.com/v1.0/roleManagement/directory/roleAssignment
The URL is used for a Microsoft Graph role assignment POST. The surrounding service principal attack path adds privileged directory access.
높음
PowerShell invocation
```powershell
The PowerShell authentication block includes importing a stolen context and saving access tokens. That is risky credential handling.
높음
PowerShell invocation
# Az PowerShell Module
The Azure PowerShell module block includes credential-based authentication and token context handling. It can enable risky cloud access workflows.
높음
PowerShell invocation
```powershell
The PowerShell block enumerates Azure subscriptions, users, groups, roles, VMs, storage, and databases. This is cloud reconnaissance guidance.
높음
PowerShell invocation
```powershell
The PowerShell exploitation block searches user attributes for passwords and leads into secret dumping. That is credential discovery guidance.
높음
PowerShell invocation
Invoke-AzVMRunCommand -ResourceGroupName $RG -VMName $VM -CommandId RunPowerShellScript -ScriptPath
The command runs a PowerShell script on an Azure VM. Remote command execution in a cloud VM is high-risk even during testing.
높음
PowerShell invocation
```powershell
The PowerShell example invokes MSOLSpray for password spraying. It is actionable credential attack guidance.
높음
sudo privilege escalation
unzip awscliv2.zip && sudo ./aws/install
The command runs an installer with sudo after downloading the AWS CLI archive. It is a legitimate install pattern, but it still executes privileged code on the host.
높음
Hardcoded URL
python fire.py --access_key <key> --secret_access_key <secret> --region us-east-1 --url https://logi
The URL is used with FireProx setup for Azure login traffic. The surrounding example supports password spraying with IP rotation.
높음
Hardcoded URL
Invoke-MSOLSpray -UserList .\users.txt -Password "Spring2024!" -URL https://<api-gateway>.execute-ap
The URL is used by MSOLSpray in a password spraying example. This supports credential attack automation.
낮음
Hardcoded URL
curl "https://login.microsoftonline.com/getuserrealm.srf?login=user@target.com&xml=1"
The URL queries Microsoft tenant realm information for a target login. It is reconnaissance against cloud identity infrastructure.
낮음
Hardcoded URL
curl "https://login.microsoftonline.com/target.com/v2.0/.well-known/openid-configuration"
The URL retrieves OpenID configuration for a target tenant. It is cloud identity reconnaissance, although the endpoint is public.
위험 요인
⚙️ 외부 명령어 (50)
references/advanced-cloud-scripts.md:89-90 references/advanced-cloud-scripts.md:91-92 references/advanced-cloud-scripts.md:108-109 references/advanced-cloud-scripts.md:110-111 references/advanced-cloud-scripts.md:259-265 references/advanced-cloud-scripts.md:9 references/advanced-cloud-scripts.md:28 references/advanced-cloud-scripts.md:50 references/advanced-cloud-scripts.md:59 references/advanced-cloud-scripts.md:80 references/advanced-cloud-scripts.md:101 references/advanced-cloud-scripts.md:118 references/advanced-cloud-scripts.md:242 references/advanced-cloud-scripts.md:244 SKILL.md:18-34 SKILL.md:34-60 SKILL.md:60-72 SKILL.md:72-78 SKILL.md:78-96 SKILL.md:96-102 SKILL.md:102-141 SKILL.md:141-147 SKILL.md:147-172 SKILL.md:172-178 SKILL.md:178-195 SKILL.md:195-201 SKILL.md:201-211 SKILL.md:211-217 SKILL.md:217-245 SKILL.md:245-251 SKILL.md:251-267 SKILL.md:267-273 SKILL.md:273-284 SKILL.md:284-290 SKILL.md:290-329 SKILL.md:329-335 SKILL.md:335-354 SKILL.md:354-362 SKILL.md:362-363 SKILL.md:363-364 SKILL.md:364-365 SKILL.md:365-366 SKILL.md:366-367 SKILL.md:367-368 SKILL.md:368-369 SKILL.md:369-375 SKILL.md:375-376 SKILL.md:376-377 SKILL.md:377-378 SKILL.md:378-379
🌐 네트워크 접근 (48)
references/advanced-cloud-scripts.md:120 references/advanced-cloud-scripts.md:123 references/advanced-cloud-scripts.md:83 references/advanced-cloud-scripts.md:91 references/advanced-cloud-scripts.md:110 references/advanced-cloud-scripts.md:120 references/advanced-cloud-scripts.md:123 references/advanced-cloud-scripts.md:289 references/advanced-cloud-scripts.md:85 references/advanced-cloud-scripts.md:120 references/advanced-cloud-scripts.md:123 SKILL.md:261 SKILL.md:262 SKILL.md:265 SKILL.md:266 SKILL.md:381 SKILL.md:399 SKILL.md:400 SKILL.md:496 SKILL.md:337 SKILL.md:340 SKILL.md:393 SKILL.md:401 SKILL.md:25 SKILL.md:29 SKILL.md:62 SKILL.md:65 SKILL.md:261 SKILL.md:262 SKILL.md:265 SKILL.md:266 SKILL.md:337 SKILL.md:340 SKILL.md:381 SKILL.md:393 SKILL.md:399 SKILL.md:400 SKILL.md:401 SKILL.md:444 SKILL.md:448 SKILL.md:261 SKILL.md:262 SKILL.md:265 SKILL.md:266 SKILL.md:381 SKILL.md:399 SKILL.md:400 SKILL.md:496
📁 파일 시스템 접근 (4)
감지된 패턴
System reconnaissance×9Network reconnaissance×3GCP credentials directoryMalware type keywords×2Pipe to shell pattern[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
감사자: codex 감사 이력 보기 →
이 보고서 공유 및 인용
버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.
보고서 링크 복사
https://skillstore.io/skills/sickn33-cloud-penetration-testing/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 배지
[](https://skillstore.io/skills/sickn33-cloud-penetration-testing?utm_source=security_passport_badge)HTML 배지
<a href="https://skillstore.io/skills/sickn33-cloud-penetration-testing?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-cloud-penetration-testing/security.svg" alt="Skillstore security assessment" loading="lazy"></a>임베드 카드
<iframe src="https://skillstore.io/embed/skills/sickn33-cloud-penetration-testing.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>학술 인용 (APA · BibTeX · CFF)
APA 인용
sickn33. (2026). cloud-penetration-testing security audit report (audit version 5) [Author version 1.1]. Skillstore. https://skillstore.io/skills/sickn33-cloud-penetration-testing/audits/5BibTeX 인용
@techreport{sickn33-sickn33-cloud-penetration-testing-2026,
author = {sickn33},
title = {cloud-penetration-testing security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-cloud-penetration-testing/audits/5},
note = {Author version 1.1}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "cloud-penetration-testing security audit report (audit version 5)"
version: "1.1"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/sickn33-cloud-penetration-testing/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-cloud-penetration-testing:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore 점수
이 점수의 이유 증거 신뢰도: 중간 41
아키텍처
85
유지보수성
87
콘텐츠
70
커뮤니티
78
사양 준수
만들 수 있는 것
승인된 클라우드 감사 준비
클라우드 평가를 위한 범위, 사전 요구 사항, 대상 플랫폼, 예상 산출물, 증거 수집을 정의합니다.
클라우드 IAM 노출 검토
위험한 액세스 경로를 찾기 위해 ID, 역할, 정책, 구독, 프로젝트, 서비스 주체를 열거합니다.
잘못된 구성 발견 사항 문서화
리소스 열거와 비밀 노출 점검을 위험 등급 및 개선 조치가 포함된 명확한 발견 사항으로 전환합니다.
이 프롬프트를 사용해 보세요
클라우드 평가 계획
AWS, Azure, GCP를 위한 승인된 클라우드 보안 평가 계획을 작성하세요. 사전 요구 사항, 범위 제어, 산출물, 증거 처리 방식을 포함하세요.
열거 체크리스트 작성
승인된 클라우드 계정을 위한 안전한 열거 체크리스트를 작성하세요. IAM, 컴퓨팅, 스토리지, 데이터베이스, 네트워킹, 로깅을 다루세요.
평가 증거 분석
이 승인된 클라우드 평가 노트를 검토하고 심각도, 영향을 받는 서비스, 비즈니스 영향, 개선 우선순위별로 발견 사항을 그룹화하세요.
개선 보고서 작성
승인된 작업을 위한 클라우드 침투 테스트 보고서 초안을 작성하세요. 경영진 요약, 기술적 발견 사항, 증거 요약, 개선 단계를 포함하세요.
모범 사례
- 테스트 단계를 수행하기 전에 서면 승인, 범위, 참여 규칙을 확인하세요.
- 최소 권한 테스트 계정을 사용하고 모든 명령, 타임스탬프, 영향을 받는 리소스를 기록하세요.
- 비밀 정보나 고객 데이터를 복사하는 것보다 읽기 전용 검증과 정제된 증거를 선호하세요.
피하기
- 승인된 범위를 벗어난 계정, 테넌트, 프로젝트 또는 사용자에 대해 이 스킬을 사용하는 것.
- 명시적 승인 없이 프로덕션에서 지속성, 자격 증명 추출 또는 password spraying 단계를 실행하는 것.
- 암호화 및 보존 기한 없이 토큰, 비밀 정보 또는 고객 데이터를 로컬 파일에 저장하는 것.
자주 묻는 질문
이 스킬은 승인된 테스트 전용인가요?
예. 서면 승인, 정의된 범위, 승인된 참여 규칙이 있는 경우에만 사용해야 합니다.
어떤 클라우드 공급자를 다루나요?
AWS, Microsoft Azure, Google Cloud Platform 및 관련 ID 서비스에 대한 평가 워크플로를 다룹니다.
도구를 자동으로 설치하나요?
아니요. 일반적인 도구와 명령을 나열하지만, 사용자가 설치, 신뢰, 변경 관리를 직접 처리해야 합니다.
전문 클라우드 감사를 대체할 수 있나요?
아니요. 구조와 예시를 제공하지만, 범위, 안전성, 최종 위험 결정에는 전문가 검토가 필요합니다.
사용자는 어떤 증거를 수집해야 하나요?
사용자는 최소한의 증거, 영향을 받는 리소스 이름, 구성 상태, 타임스탬프, 개선 검증 메모를 수집해야 합니다.
이 스킬이 고위험인 이유는 무엇인가요?
오용될 수 있는 자격 증명 발견, 메타데이터 액세스, password spraying, 지속성 관련 예시가 포함되어 있습니다.
개발자 세부 정보
작성자
sickn33라이선스
MIT
작성자 버전
v1.1
Skillstore 리비전
r1
버전 안내
작성자가 선언한 버전은 유효한 SemVer가 아닙니다.
리포지토리
https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/cloud-penetration-testing참조
3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88
유지보수 최신성
2026. 7. 22.
사용량
7 다운로드 · 210 조회
파일 구조
sickn33의 다른 스킬
전체 보기📦
prompt-engineering-patterns
85검증된 패턴으로 LLM 프롬프트 개선하기
일관성 없는 프롬프트는 시간을 낭비하게 만들고 AI 출력 결과를 신뢰하기 어렵게 합니다. 이 스킬은 재사용 가능한 패턴, 예시, 평가 단계, 최적화 워크플로를 통해 프롬프트 설계를 안내합니다.
생산성 보기
📦
senior-architect
81확장 가능한 소프트웨어 아키텍처 설계
아키텍처 결정은 웹, 모바일, 백엔드, 클라우드 시스템 전반에서 비교하기 어렵습니다. 이 스킬은 보고서, 의존성 검토, 트레이드오프 문서화를 위한 구조화된 가이드와 로컬 스캐폴드 스크립트를 제공합니다.
코딩 및 개발 보기
📦
senior-fullstack
81시니어 패턴으로 풀스택 앱 구축
팀에는 최신 웹 애플리케이션을 위한 일관된 설정, 아키텍처, 리뷰 지침이 필요합니다. 이 스킬은 React, Next.js, Node.js, GraphQL, PostgreSQL 프로젝트를 위한 스캐폴더, 워크플로 참조, 품질 프롬프트를 제공합니다.
코딩 및 개발 보기
📦
prompt-engineer
81Prompt Engineer로 AI 프롬프트 최적화
목표가 모호하거나 복잡할 때 명확한 프롬프트를 작성하기는 어렵습니다. 이 스킬은 검증된 프롬프트 프레임워크를 사용해 거친 요청을 구조화된 프롬프트로 바꿉니다.
생산성 보기
📦
product-manager-toolkit
80리서치 인사이트로 제품 업무 우선순위 지정
제품 팀은 기능의 우선순위를 더 빠르게 정하고, 인터뷰를 종합하며, 의사결정을 문서화할 방법이 필요합니다. 이 skill은 구조화된 계획 수립을 위해 RICE 점수화, 인터뷰 분석, PRD 템플릿을 제공합니다.
생산성 보기
관련 스킬
전체 보기📦
senior-security
81애플리케이션 보안 리뷰 강화
작성자 alirezarezvani
보안 리뷰에는 일관된 체크리스트와 재사용 가능한 워크플로가 부족한 경우가 많습니다. 이 스킬은 Claude, Codex, Claude Code를 위한 보안 리뷰 스캐폴드, 참조 가이드, 간단한 보고 스크립트를 제공합니다.
보안 및 컴플라이언스 보기
📦
azure-rbac
80최소 권한 Azure RBAC 역할 선택
작성자 microsoft
Azure 역할 할당은 쉽게 과도한 권한이 부여될 수 있습니다. 이 스킬은 최소 권한 역할을 선택하고 Azure CLI 및 Bicep 할당 단계를 작성하는 데 도움을 줍니다.
보안 및 컴플라이언스 보기
📦
azure-role-selector
79최소 권한 Azure 역할 선택
작성자 7Spade
요구 사항이 명확하지 않으면 Azure 역할 결정으로 인해 과도한 액세스 권한이 부여될 수 있습니다. 이 스킬은 원하는 권한을 최소 역할과 할당 지침에 매핑합니다.
보안 및 컴플라이언스 보기
📦
azure-compliance
79Azure 규정 준수 및 Key Vault 만료 감사
작성자 microsoft
Azure 팀은 위험이 장애로 이어지기 전에 명확한 규정 준수 결과가 필요합니다. 이 스킬은 범위가 지정된 감사를 실행하고 결과를 우선순위가 지정된 작업으로 전환합니다.
보안 및 컴플라이언스 보기
📦
security-report
78보안 평가 보고서 생성
작성자 BytR-Ecosystems
보안 발견 사항은 경영진과 기술 팀에 명확하게 제시하기 어렵습니다. 이 스킬은 위험 등급과 개선 지침이 포함된 구조화된 DOCX 보고서를 생성합니다.
보안 및 컴플라이언스 보기
📦
web-app-penetration-testing
70Test Authorized Web Apps with Strix
작성자 usestrix
Web application reviews can miss vulnerabilities behind login and across tenant boundaries. This skill guides authorized Strix testing, evidence review, and repeat testing after fixes.
보안 및 컴플라이언스 보기