skills.rest
bpnrockstar
bpnrockstarCOMMUNITY
Explore all skills by this author →
GitHub

cloud-iam-deep

Detect security vulnerabilities in AWS, Azure, and GCP IAM configurations.

Updated Jul 1, 2026
Search Tags:#privilege escalation#cloud security#red teaming#cloud pentesting#IAM exploitation
One-click install
npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill cloud-iam-deep-bpnrockstar
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cloud-iam-deep
Source: https://github.com/bpnrockstar/UnifiedBugHunter/tree/main/skills/cloud-iam-deep
Command: npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill cloud-iam-deep-bpnrockstar

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires aws, az, gcloud, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides red-team attack vectors for cloud IAM exploitation, allowing you to identify and exploit weaknesses in cloud environments to escalate privileges.

Core Features & Use Cases

  • Cloud IAM Enumeration: Identify IAM users, roles, and policies in AWS, Azure, and GCP.
  • STS Chaining: Leverage AssumeRole for account hopping and role chaining.
  • External Credential Abuse: Exploit external access paths post-credential discovery.
  • Privilege Escalation: Enumerate and escalate privileges across cloud providers.

Quick Start

Analyze credentials from ' leaked_aws_access_key.json' using cloud-iam-deep to identify potential security vulnerabilities.

Frequently Asked Questions about cloud-iam-deep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect cloud IAM privilege escalation paths across AWS, Azure, and GCP?▼

Cloud IAM privilege escalation detection involves enumerating users, roles, and policies to find misconfigurations and excessive permissions. This skill identifies vulnerabilities and potential account hopping across AWS, Azure, and GCP providers.

Can I use AssumeRole for STS chaining to escalate cloud permissions?▼

Yes, STS chaining leverages AssumeRole for account hopping and role chaining to escalate cloud permissions. This technique exploits misconfigured IAM trust policies to traverse accounts and elevate access.

What is the best way to find cloud IAM misconfigurations during a red team assessment?▼

Finding cloud IAM misconfigurations requires enumerating credentials and IAM structures to validate excessive permissions. This skill analyzes leaked credential files to identify exploitable external access paths for red teaming.

Do I need aws, az, and gcloud CLIs installed to enumerate cloud IAM structures?▼

Yes, you need the aws, az, and gcloud CLIs installed to enumerate cloud IAM structures. These dependencies are required to validate credentials and detect misconfigurations across the respective cloud providers.

How do I exploit external access paths after discovering leaked cloud credentials?▼

Exploiting external access paths post-credential discovery involves analyzing leaked access key files to identify security vulnerabilities. This skill detects potential privilege escalation vectors from the discovered external credentials.

Related Skills

Explore More Software Engineering Skills→
lloydchanglloydchang
2

validate-config

Validate multi-cloud infrastructure configurations against compliance requirements.

Community
Advanced
wgpsecwgpsec
1.6k

post-exploit-linux

Plan and execute Linux post-exploitation workflows from initial access through privilege escalation.

Official
Advanced
devCharuzudevCharuzu

cloud-security

Analyze AWS, Azure, and GCP cloud configurations for misconfigurations and exposure risks.

Community
Intermediate
kfolkeskfolkes
2

checkov-security-scan

Scan Infrastructure as Code for security misconfigurations and compliance violations using Checkov.

Community
Intermediate