Identifies and exploits cloud attack surfaces in authorized bug bounty programs.
npx skills add https://github.com/AshtonVaughan/bountyhound --skill cloud-ashtonvaughan
Please help me install this Agent Skill. Skill: cloud Source: https://github.com/AshtonVaughan/bountyhound/tree/main/bountyhound/skills/cloud Command: npx skills add https://github.com/AshtonVaughan/bountyhound --skill cloud-ashtonvaughan
This skill enables security professionals to systematically identify and evaluate cloud attack surfaces across major providers within authorized bug bounty scopes, transforming manual reconnaissance into repeatable, auditable methodology.
Provide a clearly scoped cloud target and issue the skill to map provider-specific attack trees and surface findings.
High-intent search queries and answers about installing and using this skill.
You can exploit cloud attack surfaces by applying provider-aware attack trees to map discovery, misconfigurations, and IAM credential leakage paths across AWS, GCP, and Azure. The methodology uses validation gates to ensure evidence-based findings.
The best way to test for SSRF and IMDS vulnerabilities is using dedicated workflows that assess instance metadata service exposure and cloud endpoint accessibility. This maps credential leakage paths within authorized testing constraints.
No, this methodology is strictly for targets within authorized bug bounty programs. It requires a clearly defined scope and safe testing constraints to systematically execute attack trees and validate cloud misconfigurations.
You validate IAM credential leakage by applying evidence-driven validation gates that capture HTTP evidence and reproducible steps. This ensures all findings regarding exposed buckets, services, or functions are fully auditable.
Yes, the approach supports discovering misconfigurations across serverless functions and storage buckets by mapping provider-specific attack trees. It systematically evaluates IAM credential leakage scenarios across these exposed cloud services.
ArdurAIAudit AWS, Azure, and GCP configurations for security misconfigurations.
kalpmodiTest OAuth 2.0 and OIDC implementations for authorization code interception and misconfigurations.
wgpsecDetect and exploit cloud instance metadata across AWS, Azure, GCP, Alibaba Cloud, and Tencent Cloud.
wgpsecSimulate Active Directory domain attack paths with concrete commands and safety guards.
