技能 cloud-penetration-testing

☁️

cloud-penetration-testing

Name: cloud-penetration-testing
Author: sickn33

低风险 ⚙️ 外部命令🌐 网络访问📁 文件系统访问

执行云安全评估

安全专业人员需要跨 Azure、AWS 和 GCP 环境的全面云渗透测试能力。此技能提供用于侦察、枚举、利用和持久性测试的结构化工作流程，并带有明确的授权要求。

支持: Claude Codex Code(CC)

⚠️ 65 差

下载技能 ZIP

在 Claude 中上传

前往设置 → 功能 → 技能 → 上传技能

开启并开始使用

测试它

正在使用“cloud-penetration-testing”。枚举 AWS S3 存储桶并检查公共访问

预期结果:

返回带有访问控制的 S3 存储桶列表，识别公开可访问的存储桶，为错误配置提供修复建议

正在使用“cloud-penetration-testing”。检查 Azure AD 中属性包含密码的用户

预期结果:

返回属性中包含敏感数据的 Azure AD 用户，显示哪些属性包含潜在机密信息

正在使用“cloud-penetration-testing”。访问 GCP 元数据服务进行凭证发现

预期结果:

从被攻陷的计算实例返回 GCP 服务账户令牌和元数据

安全审计

低风险

v1 • 2/25/2026

This skill contains cloud penetration testing commands and scripts commonly used in authorized security assessments. Static analysis flagged external command execution, network access, and metadata endpoint patterns - all standard elements of legitimate cloud security testing. The skill includes clear authorization requirements and is designed for security professionals. Findings are false positives in this context as they represent standard pen testing techniques for Azure, AWS, and GCP.

已扫描文件

826

分析行数

发现项

审计总数

高风险问题 (4)

SKILL.md:20-36 SKILL.md:80-98 SKILL.md:143-174 SKILL.md:253-269 SKILL.md:275-286 SKILL.md:337-395 SKILL.md:443-475 references/advanced-cloud-scripts.md:9-130 references/advanced-cloud-scripts.md:148-190

External Command Execution

Skill contains numerous external command invocations using shell backticks and system() calls. These execute AWS CLI, Azure CLI, and GCP commands for security testing purposes. This is standard penetration testing practice but could be misused.

SKILL.md:263-268 SKILL.md:339-342 SKILL.md:383 SKILL.md:401-402 references/advanced-cloud-scripts.md:120-124

Cloud Metadata Service Access

Skill contains commands to access AWS, Azure, and GCP metadata endpoints (169.254.169.254). This is standard cloud security assessment technique for checking instance credentials and configuration.

SKILL.md:440-451 SKILL.md:181 references/advanced-cloud-scripts.md:242-272

Password Spraying Scripts

Skill contains password spraying tools and scripts for testing credential strength. This is a legitimate security testing technique but could be weaponized for brute force attacks.

SKILL.md:169-174 SKILL.md:259-261 SKILL.md:353-356 SKILL.md:295 SKILL.md:477

Credential Access Techniques

Skill demonstrates techniques for accessing credentials from cloud services including Key Vault secrets, Lambda environment variables, and user data. This is standard cloud security assessment.

中风险问题 (2)

SKILL.md:44-74 SKILL.md:100-143 SKILL.md:215-247 SKILL.md:427

Network Reconnaissance

Skill includes network enumeration commands for cloud resources. This is standard reconnaissance for security assessments.

SKILL.md:353-356 SKILL.md:67 SKILL.md:464

Filesystem Access

Skill contains filesystem access commands for credential discovery. This is standard post-exploitation technique in authorized assessments.

低风险问题 (1)

SKILL.md:176-197 SKILL.md:271-286

Persistence Techniques

Skill documents persistence techniques like creating service principals and backdoor accounts. These are standard post-exploitation techniques documented for authorized assessments.

风险因素

⚙️ 外部命令 (114)

🌐 网络访问 (50)

📁 文件系统访问 (5)

SKILL.md:354 SKILL.md:67 SKILL.md:354 SKILL.md:354 SKILL.md:464

检测到的模式

Code Execution + Network + Credentials

审计者: claude

质量评分

架构

100

可维护性

内容

社区

安全

规范符合性

你能构建什么

安全顾问执行 AWS 评估

执行全面的 AWS 安全评估，包括 S3 存储桶枚举、IAM 角色分析和 EC2 实例测试

蓝队成员测试防御

通过模拟攻击者技术验证组织的云安全控制措施

DevSecOps 工程师加固云基础设施

在攻击者利用之前识别和修复云错误配置

试试这些提示

基础 AWS 枚举

Use the cloud-penetration-testing skill to enumerate AWS resources. List all S3 buckets, EC2 instances, and IAM users accessible with current credentials. Run: aws sts get-caller-identity first to check authentication.

Azure AD 用户发现

Use the cloud-penetration-testing skill to enumerate Azure AD users and groups. List all users, groups, and role assignments. Check for users with password in attributes.

GCP 项目评估

Use the cloud-penetration-testing skill to assess GCP security. List enabled services, compute instances, storage buckets, and IAM policies. Check for overly permissive service accounts.

全面云审计

Use the cloud-penetration-testing skill to perform a comprehensive multi-cloud security assessment covering AWS, Azure, and GCP. Document all findings with remediation recommendations.