skills.rest
gerald-ica
gerald-icaCOMMUNITY
Explore all skills by this author →
GitHub

AWS Penetration Testing

Exploit AWS security vulnerabilities including IAM misconfigurations, SSRF, and S3 buckets.

Updated Apr 6, 2026
Search Tags:#penetration testing#AWS#IAM#security assessment#SSRF
One-click install
npx skills add https://github.com/gerald-ica/dev-tool-configs --skill aws-penetration-testing-gerald-ica
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: AWS Penetration Testing
Source: https://github.com/gerald-ica/dev-tool-configs/tree/main/gemini/skills/aws-penetration-testing
Command: npx skills add https://github.com/gerald-ica/dev-tool-configs --skill aws-penetration-testing-gerald-ica

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires awscli, pacu, prowler, scoutsuite, enumerate-iam, principalmapper, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill empowers users to identify and exploit security vulnerabilities in AWS cloud environments, providing comprehensive techniques for penetration testing.

Core Features & Use Cases

  • IAM Enumeration: Discover and analyze IAM roles, users, and policies.
  • Privilege Escalation: Identify and exploit permission discrepancies for escalated access.
  • SSRF and Metadata Endpoint Exploitation: Access AWS metadata endpoints and exploit SSRF vulnerabilities.
  • S3 Bucket and Lambda Exploitation: Exploit S3 buckets and Lambda functions for data extraction and persistence.
  • EC2 and SSM Exploitation: Mount EBS volumes and execute commands on EC2 instances using SSM.
  • Covering Tracks: Disable CloudTrail and modify user-agents to avoid detection.
  • Quick Reference: Provides a concise reference for common AWS pentesting commands and outputs.

Quick Start

Run the following command to initiate a penetration test on your AWS environment: aws sts get-caller-identity

Frequently Asked Questions about AWS Penetration Testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform penetration testing on AWS IAM roles and policies?▼

AWS penetration testing identifies IAM misconfigurations by enumerating roles, users, and policies to discover permission discrepancies. It leverages tools like enumerate-iam and principalmapper to analyze access boundaries and exploit privilege escalation paths within your cloud environment.

What is the best way to exploit SSRF vulnerabilities to access AWS metadata endpoints?▼

Exploiting SSRF vulnerabilities to access AWS metadata endpoints involves manipulating server-side requests to retrieve instance credentials. This AWS penetration testing technique uses SSRF payloads to query the metadata service, extracting temporary IAM credentials for escalated cloud access.

Can I use Pacu and Prowler for AWS security assessments?▼

Yes, you can use Pacu and Prowler for AWS security assessments. Pacu facilitates exploitation and privilege escalation, while Prowler evaluates cloud configurations against compliance benchmarks, together providing comprehensive vulnerability identification and penetration testing coverage.

How do I mount EBS volumes and execute commands on EC2 instances using SSM?▼

AWS penetration testing mounts EBS volumes and executes commands on EC2 instances using SSM by exploiting over-permissive IAM roles. This allows attaching snapshots to controlled instances for data extraction and running arbitrary payloads via the SSM agent.

Does AWS penetration testing include covering tracks by disabling CloudTrail?▼

AWS penetration testing includes covering tracks by disabling CloudTrail logging and modifying user-agents to avoid detection. This constraint-handling technique ensures exploitation activities remain stealthy during security assessments without triggering standard monitoring alerts.

What tools are needed to exploit S3 buckets and Lambda functions in AWS?▼

Exploiting S3 buckets and Lambda functions requires the AWS CLI alongside tools like Pacu and ScoutSuite. These dependencies enable attackers to extract leaked data from misconfigured buckets and establish persistence through vulnerable serverless function configurations.

Related Skills

Explore More Software Engineering Skills→
AndreKuraitAndreKurait

signing-in-to-aws

Run preflight checks and obtain short-term AWS credentials via aws login.

Community
Advanced
zebbernzebbern
4.5k

AWS Penetration Testing

Enumerate AWS IAM misconfigurations and privilege escalation paths.

Community
Advanced
giosuetedeschi-specgiosuetedeschi-spec

AWS Penetration Testing

Enumerate IAM permissions and identify privilege escalation paths in AWS environments.

Community
Advanced
hardw00thardw00t
90

cloud-security

Automate multi-cloud security assessments across AWS, Azure, and GCP.

Community
Advanced