skills.rest
AndyAnh174
AndyAnh174COMMUNITY
Explore all skills by this author →
WebsiteGitHub

AWS Penetration Testing

Enumerate IAM permissions and exploit AWS cloud resources.

Updated Jan 8, 2026
Search Tags:#aws#penetration testing#exploitation#iam#cloud security#red team
One-click install
npx skills add https://github.com/AndyAnh174/BanThuoc-SEO --skill aws-penetration-testing-andyanh174
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: AWS Penetration Testing
Source: https://github.com/AndyAnh174/BanThuoc-SEO/tree/main/.agent/skills/aws-penetration-testing
Command: npx skills add https://github.com/AndyAnh174/BanThuoc-SEO --skill aws-penetration-testing-andyanh174

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires boto3, pacu, prowler, scoutsuite, enumerate-iam, principalmapper, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides comprehensive techniques to identify and exploit vulnerabilities within Amazon Web Services environments, helping to secure your cloud infrastructure.

Core Features & Use Cases

  • IAM Enumeration & Escalation: Discover and exploit privilege escalation paths within AWS Identity and Access Management.
  • Cloud Resource Exploitation: Target S3 buckets, Lambda functions, and EC2 instances for deeper access and data exfiltration.
  • Use Case: A security team needs to assess the security posture of their AWS deployment. They can use this Skill to simulate an attacker's actions, identify misconfigurations, and test their defenses against common cloud attack vectors.

Quick Start

Use the AWS Penetration Testing skill to enumerate IAM permissions for a given AWS profile.

Frequently Asked Questions about AWS Penetration Testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enumerate IAM permissions and find privilege escalation paths in AWS?▼

You can enumerate IAM permissions to discover privilege escalation paths using tools like enumerate-iam and principalmapper, which analyze IAM policies and roles to identify exploitable misconfigurations within AWS environments.

Can I exploit S3 buckets and Lambda functions during an AWS cloud security assessment?▼

Yes, AWS penetration testing techniques cover S3 bucket exploitation and Lambda function exploitation to gain deeper access and facilitate data exfiltration, simulating attacker actions to test your cloud defenses against resource exploitation.

What is SSRF to metadata endpoints and how does it work in AWS red team operations?▼

SSRF to metadata endpoints is an AWS red team technique where server-side request forgery exploits the EC2 instance metadata service to extract temporary IAM credentials, enabling attackers to pivot deeper into the cloud environment.

Do I need AWS CLI and boto3 to perform penetration testing on my cloud infrastructure?▼

Yes, AWS CLI and boto3 are required dependencies for performing penetration testing on cloud infrastructure. They provide the foundational API access needed to run comprehensive security assessments using frameworks like Pacu, Prowler, and ScoutSuite.

How do I maintain persistence after gaining access to an AWS environment during a red team exercise?▼

Maintaining persistence in an AWS environment during red team operations involves leveraging IAM exploitation to create backdoor access paths, ensuring continued access through established privilege escalation routes and compromised cloud resources.

Pacu vs Prowler: which tool should I use for AWS penetration testing?▼

Pacu is designed for AWS penetration testing and exploitation, while Prowler focuses on security posture assessment and configuration auditing. Both tools are included as dependencies for comprehensive AWS security assessments, covering offensive and defensive perspectives.

Related Skills

Explore More Software Engineering Skills→
jcastillotxjcastillotx

AWS Penetration Testing

Assess AWS environments with IAM enumeration, privilege escalation, and S3 testing.

Community
Advanced
trilwutrilwu
109

exploiting-cloud-platforms

Discover and validate cloud misconfigurations and weak IAM permissions across AWS, Azure, and GCP.

Community
Advanced
hardw00thardw00t
90

cloud-security

Automate multi-cloud security assessments across AWS, Azure, and GCP.

Community
Advanced
lips85lips85

AWS Penetration Testing

Performs AWS penetration tests including privilege escalation and IAM enumeration using Pacu and Boto3.

Community
Advanced