Cloud Penetration Testing

dokhacgiakhoa/cloud penetration testing

This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate cloud resources", "exploit cloud misconfigurations", "test O365 security", "extract secrets from cloud environments", or "audit cloud infrastructure". It provides comprehensive techniques for security assessment across major cloud platforms.

7k tokens

context cost

the whole folder, loaded on every use

files

instructions only

copies elsewhere

how many repositories repackaged it

505

stars on the repo

on the repository, not the skill itself

Install

one command, takes just this skill from the repository

npx skills add https://github.com/Dokhacgiakhoa/Agent-Skills-4-Vibe-Coding-CLI --skill Cloud Penetration Testing

What comes with it

24 721 bytes besides the instruction

references/advanced-cloud-scripts.md

sub-skills/aws-key-commands.md

sub-skills/azure-key-commands.md

sub-skills/detection-considerations.md

sub-skills/example-1-azure-password-spray.md

sub-skills/example-2-aws-s3-bucket-enumeration.md

sub-skills/example-3-gcp-service-account-compromise.md

sub-skills/gcp-key-commands.md

sub-skills/legal-requirements.md

sub-skills/metadata-service-urls.md

sub-skills/phase-1-reconnaissance.md

sub-skills/phase-10-gcp-enumeration.md

sub-skills/phase-11-gcp-exploitation.md

sub-skills/phase-2-azure-authentication.md

sub-skills/phase-3-azure-enumeration.md

sub-skills/phase-4-azure-exploitation.md

sub-skills/phase-5-azure-persistence.md

sub-skills/phase-6-aws-authentication.md

sub-skills/phase-7-aws-enumeration.md

sub-skills/phase-8-aws-exploitation.md

sub-skills/phase-9-aws-persistence.md

sub-skills/required-access.md

sub-skills/required-knowledge.md

sub-skills/required-tools.md

sub-skills/technical-limitations.md

sub-skills/useful-tools.md

The instruction itself

29 sections, as written by the author

Cloud Penetration Testing

Purpose

Conduct comprehensive security assessments of cloud infrastructure across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill covers reconnaissance, authentication testing, resource enumeration, privilege escalation, data extraction, and persistence techniques for authorized cloud security engagements.

Prerequisites

🧠 Knowledge Modules (Fractal Skills)

1. Required Tools

2. Required Knowledge

3. Required Access

4. Phase 1: Reconnaissance

5. Phase 2: Azure Authentication

6. Phase 3: Azure Enumeration

7. Phase 4: Azure Exploitation

8. Phase 5: Azure Persistence

9. Phase 6: AWS Authentication

10. Phase 7: AWS Enumeration

11. Phase 8: AWS Exploitation

12. Phase 9: AWS Persistence

13. Phase 10: GCP Enumeration

14. Phase 11: GCP Exploitation

15. Azure Key Commands

16. AWS Key Commands

17. GCP Key Commands

18. Metadata Service URLs

19. Useful Tools

20. Legal Requirements

21. Technical Limitations

22. Detection Considerations

23. Example 1: Azure Password Spray

24. Example 2: AWS S3 Bucket Enumeration

25. Example 3: GCP Service Account Compromise

How to use it

Copy the folder

Take dokhacgiakhoa/cloud penetration testing from the repository into ~/.claude/skills for personal use, or into .claude/skills inside a project.

Check the name does not clash

The agent identifies a skill by the name field in its header. Two skills with the same name cannot sit side by side — one of them will be ignored.