aws penetration testing

SKILL.md

Provide comprehensive techniques for penetration testing AWS cloud environments. Covers IAM enumeration, privilege escalation, SSRF to metadata endpoint, S3 bucket exploitation, Lambda code extraction, and persistence techniques for red team operations.

| Pacu | AWS exploitation framework | git clone https://github.com/RhinoSecurityLabs/pacu | | SkyArk | Shadow Admin discovery | Import-Module .\SkyArk.ps1 | | Prowler | Security auditing | pip install prowler | | ScoutSuite | Multi-cloud auditing | pip install scoutsuite |

| enumerate-iam | Permission enumeration | git clone https://github.com/andresriancho/enumerate-iam | | Principal Mapper | IAM analysis | pip install principalmapper |

当用户要求“渗透测试 AWS”、“测试 AWS 安全性”、“枚举 IAM”、“利用云基础设施”、“AWS 权限升级”、“S3 存储桶测试”、“元数据 SSRF”、“Lambda 利用”或需要有关 Amazon Web Services 安全评估的指导时，应使用此技能。 来源：zebbern/secops-cli-guides。

查看原文