aws penetration testing

SKILL.md

Provide comprehensive techniques for penetration testing AWS cloud environments. Covers IAM enumeration, privilege escalation, SSRF to metadata endpoint, S3 bucket exploitation, Lambda code extraction, and persistence techniques for red team operations.

| Pacu | AWS exploitation framework | git clone https://github.com/RhinoSecurityLabs/pacu | | SkyArk | Shadow Admin discovery | Import-Module .\SkyArk.ps1 | | Prowler | Security auditing | pip install prowler | | ScoutSuite | Multi-cloud auditing | pip install scoutsuite |

| enumerate-iam | Permission enumeration | git clone https://github.com/andresriancho/enumerate-iam | | Principal Mapper | IAM analysis | pip install principalmapper |

Esta habilidad debe usarse cuando el usuario solicita "probar AWS", "probar la seguridad de AWS", "enumerar IAM", "explotar la infraestructura de la nube", "escalar privilegios de AWS", "pruebas de depósitos S3", "metadatos SSRF", "explotación de Lambda" o necesita orientación sobre la evaluación de seguridad de Amazon Web Services. Fuente: zebbern/claude-code-guide.

Ver original