Пентест облачной инфраструктуры AWS

★ 6.6 · security

aws-penetration-testing is a Claude Code skill that provides comprehensive techniques for penetration testing AWS cloud environments, covering IAM enumeration, privilege escalation, metadata SSRF (IMDSv1 and IMDSv2), S3 bucket exploitation, Lambda code extraction, and persistence mechanisms for red team operations. The skill walks through a complete attack workflow — from initial identity enumeration with `aws sts get-caller-identity` to advanced privilege escalation via shadow admin permissions such as iam:CreateAccessKey, iam:AttachUserPolicy, and lambda:UpdateFunctionCode. Prerequisites include AWS CLI configured with valid credentials, Python 3 with boto3, and tools like Pacu, Prowler, ScoutSuite, SkyArk, enumerate-iam, and Principal Mapper. It is designed for security professionals conducting AWS infrastructure audits, penetration testers, and red teamers who need ready-to-use commands and scripts for assessing the security posture of Amazon cloud environments.