AWS Penetration Testing

dokhacgiakhoa/aws penetration testing

This skill should be used when the user asks to "pentest AWS", "test AWS security", "enumerate IAM", "exploit cloud infrastructure", "AWS privilege escalation", "S3 bucket testing", "metadata SSRF", "Lambda exploitation", or needs guidance on Amazon Web Services security assessment.

6k tokens

context cost

the whole folder, loaded on every use

files

instructions only

copies elsewhere

how many repositories repackaged it

505

stars on the repo

on the repository, not the skill itself

Install

one command, takes just this skill from the repository

npx skills add https://github.com/Dokhacgiakhoa/Agent-Skills-4-Vibe-Coding-CLI --skill AWS Penetration Testing

What comes with it

19 775 bytes besides the instruction

references/advanced-aws-pentesting.md

sub-skills/add-inline-admin-policy.md

sub-skills/attach-admin-policy.md

sub-skills/bucket-discovery.md

sub-skills/bucket-enumeration.md

sub-skills/create-access-key-for-another-user.md

sub-skills/disable-cloudtrail.md

sub-skills/example-1-ssrf-to-admin.md

sub-skills/lambda-privilege-escalation.md

sub-skills/mount-ebs-volume.md

sub-skills/public-bucket-search.md

sub-skills/shadow-admin-permissions.md

sub-skills/shadow-copy-attack-windows-dc.md

sub-skills/step-1-initial-enumeration.md

sub-skills/step-2-iam-enumeration.md

sub-skills/step-3-metadata-ssrf-ec2.md

The instruction itself

22 sections, as written by the author

AWS Penetration Testing

Purpose

Provide comprehensive techniques for penetration testing AWS cloud environments. Covers IAM enumeration, privilege escalation, SSRF to metadata endpoint, S3 bucket exploitation, Lambda code extraction, and persistence techniques for red team operations.

Inputs/Prerequisites

AWS CLI configured with credentials
Valid AWS credentials (even low-privilege)
Understanding of AWS IAM model
Python 3, boto3 library
Tools: Pacu, Prowler, ScoutSuite, SkyArk

Outputs/Deliverables

IAM privilege escalation paths
Extracted credentials and secrets
Compromised EC2/Lambda/S3 resources
Persistence mechanisms
Security audit findings

Essential Tools

| Tool | Purpose | Installation |

|------|---------|--------------|

| Pacu | AWS exploitation framework | git clone https://github.com/RhinoSecurityLabs/pacu |

| SkyArk | Shadow Admin discovery | Import-Module .\SkyArk.ps1 |

| Prowler | Security auditing | pip install prowler |

| ScoutSuite | Multi-cloud auditing | pip install scoutsuite |

| enumerate-iam | Permission enumeration | git clone https://github.com/andresriancho/enumerate-iam |

| Principal Mapper | IAM analysis | pip install principalmapper |

Core Workflow

🧠 Knowledge Modules (Fractal Skills)

1. Step 1: Initial Enumeration

2. Step 2: IAM Enumeration

3. Step 3: Metadata SSRF (EC2)

4. Shadow Admin Permissions

5. Create Access Key for Another User

6. Attach Admin Policy

7. Add Inline Admin Policy

8. Lambda Privilege Escalation

9. Bucket Discovery

10. Bucket Enumeration

11. Public Bucket Search

12. Mount EBS Volume

13. Shadow Copy Attack (Windows DC)

14. Disable CloudTrail

15. Example 1: SSRF to Admin

How to use it

Copy the folder

Take dokhacgiakhoa/aws penetration testing from the repository into ~/.claude/skills for personal use, or into .claude/skills inside a project.

Check the name does not clash

The agent identifies a skill by the name field in its header. Two skills with the same name cannot sit side by side — one of them will be ignored.

Install what it needs

The instructions reference pip. Without those the skill loads but fails at the first command.