AWS Penetration Testing Agent Skill

This skill should be used when the user asks to "pentest AWS", "test AWS security", "enumerate IAM", "exploit cloud infrastructure", "AWS privilege escalation", "S3 bucket testing", "metadata SSRF", "Lambda exploitation", or needs guidance on Amazon Web Services security assessment.

6k tokens

context cost

the whole folder, loaded on every use

files

instructions only

copies elsewhere

how many repositories repackaged it

505

stars on the repo

on the repository, not the skill itself

Install

one command, takes just this skill from the repository

npx skills add https://github.com/Dokhacgiakhoa/Agent-Skills-4-Vibe-Coding-CLI --skill AWS Penetration Testing

What comes with it

19 775 bytes besides the instruction

references/advanced-aws-pentesting.md

sub-skills/add-inline-admin-policy.md

sub-skills/attach-admin-policy.md

sub-skills/bucket-discovery.md

sub-skills/bucket-enumeration.md

sub-skills/create-access-key-for-another-user.md

sub-skills/disable-cloudtrail.md

sub-skills/example-1-ssrf-to-admin.md

sub-skills/lambda-privilege-escalation.md

sub-skills/mount-ebs-volume.md

sub-skills/public-bucket-search.md

sub-skills/shadow-admin-permissions.md

sub-skills/shadow-copy-attack-windows-dc.md

sub-skills/step-1-initial-enumeration.md

sub-skills/step-2-iam-enumeration.md

sub-skills/step-3-metadata-ssrf-ec2.md

The instruction itself

22 sections, as written by the author

AWS Penetration Testing

Purpose

Provide comprehensive techniques for penetration testing AWS cloud environments. Covers IAM enumeration, privilege escalation, SSRF to metadata endpoint, S3 bucket exploitation, Lambda code extraction, and persistence techniques for red team operations.

Inputs/Prerequisites

AWS CLI configured with credentials
Valid AWS credentials (even low-privilege)
Understanding of AWS IAM model
Python 3, boto3 library
Tools: Pacu, Prowler, ScoutSuite, SkyArk

Outputs/Deliverables

IAM privilege escalation paths
Extracted credentials and secrets
Compromised EC2/Lambda/S3 resources
Persistence mechanisms
Security audit findings

Essential Tools

| Tool | Purpose | Installation |

|------|---------|--------------|

| Pacu | AWS exploitation framework | git clone https://github.com/RhinoSecurityLabs/pacu |

| SkyArk | Shadow Admin discovery | Import-Module .\SkyArk.ps1 |

| Prowler | Security auditing | pip install prowler |

| ScoutSuite | Multi-cloud auditing | pip install scoutsuite |

| enumerate-iam | Permission enumeration | git clone https://github.com/andresriancho/enumerate-iam |

| Principal Mapper | IAM analysis | pip install principalmapper |

Core Workflow

🧠 Knowledge Modules (Fractal Skills)

1. Step 1: Initial Enumeration

2. Step 2: IAM Enumeration

3. Step 3: Metadata SSRF (EC2)

4. Shadow Admin Permissions

5. Create Access Key for Another User

6. Attach Admin Policy

7. Add Inline Admin Policy

8. Lambda Privilege Escalation

9. Bucket Discovery

10. Bucket Enumeration

11. Public Bucket Search

12. Mount EBS Volume

13. Shadow Copy Attack (Windows DC)

14. Disable CloudTrail

15. Example 1: SSRF to Admin

Other skills for the same job

different authors, same section of the catalogue

Network 101

by ComeOnOliver

×2

This skill should be used when the user asks to "set up a web server", "configure HTTP or HTTPS", "perform SNMP enumeration", "configure SMB shares", "test network services", or needs guidance on configuring and testing network services for penetration testing labs.

This skill should be used when the user asks to "run pentest commands", "scan with nmap", "use metasploit exploits", "crack passwords with hydra or john", "scan web vulnerabilities with nikto", "enumerate networks", or needs essential penetration testing command references.

Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or automating code vulnerability detection.

Smtp Penetration Testing

by ComeOnOliver

×2

This skill should be used when the user asks to "perform SMTP penetration testing", "enumerate email users", "test for open mail relays", "grab SMTP banners", "brute force email credentials", or "assess mail server security". It provides comprehensive techniques for testing SMTP server security.

7k tokens

SQL Injection Testing

by ComeOnOliver

×2

This skill should be used when the user asks to "test for SQL injection vulnerabilities", "perform SQLi attacks", "bypass authentication using SQL injection", "extract database information through injection", "detect SQL injection flaws", or "exploit database query vulnerabilities". It provides comprehensive techniques for identifying, exploiting, and understanding SQL injection attack vectors across different database systems.

6k tokens

SSH Penetration Testing

by ComeOnOliver

×2

This skill should be used when the user asks to "pentest SSH services", "enumerate SSH configurations", "brute force SSH credentials", "exploit SSH vulnerabilities", "perform SSH tunneling", or "audit SSH security". It provides comprehensive SSH penetration testing methodologies and techniques.

8k tokens

Wordpress Penetration Testing

by ComeOnOliver

×2

This skill should be used when the user asks to "pentest WordPress sites", "scan WordPress for vulnerabilities", "enumerate WordPress users, themes, or plugins", "exploit WordPress vulnerabilities", or "use WPScan". It provides comprehensive WordPress security assessment methodologies.

7k tokens

How to use it

Copy the folder

Take dokhacgiakhoa/aws penetration testing from the repository into ~/.claude/skills for personal use, or into .claude/skills inside a project.

Check the name does not clash

The agent identifies a skill by the name field in its header. Two skills with the same name cannot sit side by side — one of them will be ignored.

Install what it needs

The instructions reference pip. Without those the skill loads but fails at the first command.