skills.rest
zebbern
zebbernCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

AWS Penetration Testing

Enumerate AWS IAM misconfigurations and privilege escalation paths.

4.5k|458|Updated Jun 21, 2025
Search Tags:#aws#penetration-testing#ssrf#cloud-security#lambda-exploitation#iam-enumeration#pacu
One-click install
npx skills add https://github.com/zebbern/claude-code-guide --skill aws-penetration-testing
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: AWS Penetration Testing
Source: https://github.com/zebbern/claude-code-guide/tree/main/skills/aws-penetration-testing
Command: npx skills add https://github.com/zebbern/claude-code-guide --skill aws-penetration-testing

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

It enables safe, structured AWS cloud penetration testing to identify IAM misconfigurations, privilege escalation paths, and data exposure risks during a sanctioned security assessment.

Core Features & Use Cases

  • IAM enumeration and privilege assessment across users, roles, and policies
  • SSRF and credential discovery workflows to validate metadata access and token rotation
  • Discovery of exposed resources such as S3 buckets, Lambda functions, and EC2 configurations
  • Use Case: Security teams audit cross-account access and privilege boundaries to prevent unauthorized access

Quick Start

Run the AWS Penetration Testing skill in a sanctioned engagement to enumerate IAM users and roles, then analyze policies for risk.

Frequently Asked Questions about AWS Penetration Testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find IAM privilege escalation paths in AWS?▼

To check IAM misconfigurations in AWS, enumerate users, roles, and policies to identify privilege escalation paths. Security teams use Python-based tools like Pacu and ScoutSuite during sanctioned assessments to analyze boundaries and prevent unauthorized access.

How do I test for SSRF and credential discovery in AWS Lambda?▼

Testing for SSRF in AWS Lambda involves validating metadata access and token rotation workflows. You apply credential discovery techniques across Lambda functions and EC2 configurations to confirm data exposure risks during authorized cloud penetration testing engagements.

Do I need AWS CLI configured to perform cloud security audits?▼

Yes, you need AWS CLI configured with valid credentials to perform cloud security audits. The penetration testing workflow requires AWS CLI alongside Python-based tooling like Prowler and SkyArk to execute IAM enumeration and vulnerability reporting tasks.

What is the best way to enumerate exposed AWS S3 buckets?▼

The best way to enumerate exposed AWS S3 buckets is by running structured discovery workflows during a sanctioned security assessment. You audit cross-account access and resource configurations using tools like Pacu and Prowler to pinpoint data exposure risks.

Can I use Pacu and Prowler for cross-account access risk remediation?▼

Yes, you can use Pacu and Prowler for cross-account access risk remediation. These Python-based tools help security teams audit privilege boundaries, identify IAM misconfigurations, and generate vulnerability reports to prevent unauthorized access in AWS cloud environments.

Related Skills

Explore More Software Engineering Skills→
jcastillotxjcastillotx

Cloud Penetration Testing

Plan and execute authorized cloud security assessments across Azure, AWS, and GCP.

Community
Advanced
cybersecwomancybersecwoman
5

cloud-iam-deep

Analyzes and validates IAM security configurations and credentials across AWS, Azure, and GCP.

Community
Advanced
gerald-icagerald-ica

AWS Penetration Testing

Exploit AWS security vulnerabilities including IAM misconfigurations, SSRF, and S3 buckets.

Community
Advanced
ArianHobson333ArianHobson333
7

aws-iam-enum

Enumerate AWS IAM policies and detect privilege escalation paths.

Community
Intermediate