aws penetration testing

SKILL.md

Provide comprehensive techniques for penetration testing AWS cloud environments. Covers IAM enumeration, privilege escalation, SSRF to metadata endpoint, S3 bucket exploitation, Lambda code extraction, and persistence techniques for red team operations.

| Pacu | AWS exploitation framework | git clone https://github.com/RhinoSecurityLabs/pacu | | SkyArk | Shadow Admin discovery | Import-Module .\SkyArk.ps1 | | Prowler | Security auditing | pip install prowler | | ScoutSuite | Multi-cloud auditing | pip install scoutsuite |

| enumerate-iam | Permission enumeration | git clone https://github.com/andresriancho/enumerate-iam | | Principal Mapper | IAM analysis | pip install principalmapper |

當用戶要求“滲透測試 AWS”、“測試 AWS 安全性”、“枚舉 IAM”、“利用雲基礎設施”、“AWS 權限升級”、“S3 存儲桶測試”、“元數據 SSRF”、“Lambda 利用”或需要有關 Amazon Web Services 安全評估的指導時，應使用此技能。 來源：zebbern/secops-cli-guides。

查看原文