المهارات cloud-penetration-testing

☁️

cloud-penetration-testing

Name: cloud-penetration-testing
Author: sickn33

مخاطر منخفضة ⚙️ الأوامر الخارجية🌐 الوصول إلى الشبكة📁 الوصول إلى نظام الملفات

執行雲端安全評估

安全專業人員需要跨 Azure、AWS 和 GCP 環境的全面雲端滲透測試能力。此技能提供結構化工作流程，用於偵察、列舉、滲透和持續性測試，並明確授權要求。

يدعم: Claude Codex Code(CC)

⚠️ 65 ضعيف

تنزيل ZIP المهارة

رفع في Claude

اذهب إلى Settings → Capabilities → Skills → Upload skill

فعّل وابدأ الاستخدام

اختبرها

استخدام "cloud-penetration-testing". 列舉 AWS S3 儲存貴體並檢查公開存取

النتيجة المتوقعة:

傳回具有存取控制的 S3 儲存貴體清單，識別可公開存取的儲存貴體，為錯誤配置提供修補建議

استخدام "cloud-penetration-testing". 檢查 Azure AD 中屬性包含密碼的使用者

النتيجة المتوقعة:

傳回屬性中包含敏感資料的 Azure AD 使用者，顯示哪些屬性包含潛在機密

استخدام "cloud-penetration-testing". 存取 GCP 中繼資料服務以探索憑證

النتيجة المتوقعة:

從遭受入侵的運算執行個體傳回 GCP 服務帳戶權杖和中繼資料

التدقيق الأمني

مخاطر منخفضة

v1 • 2/25/2026

This skill contains cloud penetration testing commands and scripts commonly used in authorized security assessments. Static analysis flagged external command execution, network access, and metadata endpoint patterns - all standard elements of legitimate cloud security testing. The skill includes clear authorization requirements and is designed for security professionals. Findings are false positives in this context as they represent standard pen testing techniques for Azure, AWS, and GCP.

الملفات التي تم فحصها

826

الأسطر التي تم تحليلها

النتائج

إجمالي عمليات التدقيق

مشكلات عالية المخاطر (4)

SKILL.md:20-36 SKILL.md:80-98 SKILL.md:143-174 SKILL.md:253-269 SKILL.md:275-286 SKILL.md:337-395 SKILL.md:443-475 references/advanced-cloud-scripts.md:9-130 references/advanced-cloud-scripts.md:148-190

External Command Execution

Skill contains numerous external command invocations using shell backticks and system() calls. These execute AWS CLI, Azure CLI, and GCP commands for security testing purposes. This is standard penetration testing practice but could be misused.

SKILL.md:263-268 SKILL.md:339-342 SKILL.md:383 SKILL.md:401-402 references/advanced-cloud-scripts.md:120-124

Cloud Metadata Service Access

Skill contains commands to access AWS, Azure, and GCP metadata endpoints (169.254.169.254). This is standard cloud security assessment technique for checking instance credentials and configuration.

SKILL.md:440-451 SKILL.md:181 references/advanced-cloud-scripts.md:242-272

Password Spraying Scripts

Skill contains password spraying tools and scripts for testing credential strength. This is a legitimate security testing technique but could be weaponized for brute force attacks.

SKILL.md:169-174 SKILL.md:259-261 SKILL.md:353-356 SKILL.md:295 SKILL.md:477

Credential Access Techniques

Skill demonstrates techniques for accessing credentials from cloud services including Key Vault secrets, Lambda environment variables, and user data. This is standard cloud security assessment.

مشكلات متوسطة المخاطر (2)

SKILL.md:44-74 SKILL.md:100-143 SKILL.md:215-247 SKILL.md:427

Network Reconnaissance

Skill includes network enumeration commands for cloud resources. This is standard reconnaissance for security assessments.

SKILL.md:353-356 SKILL.md:67 SKILL.md:464

Filesystem Access

Skill contains filesystem access commands for credential discovery. This is standard post-exploitation technique in authorized assessments.

مشكلات منخفضة المخاطر (1)

SKILL.md:176-197 SKILL.md:271-286

Persistence Techniques

Skill documents persistence techniques like creating service principals and backdoor accounts. These are standard post-exploitation techniques documented for authorized assessments.

عوامل الخطر

⚙️ الأوامر الخارجية (114)

🌐 الوصول إلى الشبكة (50)

📁 الوصول إلى نظام الملفات (5)

SKILL.md:354 SKILL.md:67 SKILL.md:354 SKILL.md:354 SKILL.md:464

الأنماط المكتشفة

Code Execution + Network + Credentials

تم تدقيقه بواسطة: claude

درجة الجودة

الهندسة المعمارية

100

قابلية الصيانة

المحتوى

المجتمع

الأمان

الامتثال للمواصفات

ماذا يمكنك بناءه

進行 AWS 評估的安全顧問

執行全面的 AWS 安全評估，包括 S3 儲存貯體列舉、IAM 角色分析和 EC2 執行個體測試

測試防禦的藍隊成員

透過模擬攻擊者技術來驗證組織的雲端安全控制

強化雲端基礎架構的 DevSecOps 工程師

在攻擊者利用之前識別並修補雲端錯誤配置

جرّب هذه الموجهات

基本 AWS 列舉

Use the cloud-penetration-testing skill to enumerate AWS resources. List all S3 buckets, EC2 instances, and IAM users accessible with current credentials. Run: aws sts get-caller-identity first to check authentication.

Azure AD 使用者探索

Use the cloud-penetration-testing skill to enumerate Azure AD users and groups. List all users, groups, and role assignments. Check for users with password in attributes.

GCP 專案評估

Use the cloud-penetration-testing skill to assess GCP security. List enabled services, compute instances, storage buckets, and IAM policies. Check for overly permissive service accounts.

全面雲端稽核

Use the cloud-penetration-testing skill to perform a comprehensive multi-cloud security assessment covering AWS, Azure, and GCP. Document all findings with remediation recommendations.