skills.rest
Kisilev13
Kisilev13COMMUNITY
Explore all skills by this author →
GitHub

cloud-iam-deep

Enumerate AWS, Azure, and GCP IAM configurations for credential exploitation vulnerabilities.

Updated Jun 18, 2026
Search Tags:#penetration testing#iam#cloud security#red team#credential enumeration
One-click install
npx skills add https://github.com/Kisilev13/Hermes-Agent-Workspace --skill cloud-iam-deep-kisilev13
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cloud-iam-deep
Source: https://github.com/Kisilev13/Hermes-Agent-Workspace/tree/main/skills/cloud-iam-deep
Command: npx skills add https://github.com/Kisilev13/Hermes-Agent-Workspace --skill cloud-iam-deep-kisilev13

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires awscli, az, gcloud, boto3, azure-ad, google-cloud, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides a deep analysis of cloud IAM for red-team penetration testing, focusing on external exploitation paths and post-credential discovery privilege escalation.

Core Features & Use Cases

  • Cloud IAM Enumeration: Enumerate AWS IAM, Azure RBAC, and GCP IAM for in-depth information.
  • STS/AssumeRole Chaining: Execute complex assume role chains to assume privileges in different accounts.
  • IMDSv1/v2 Attacks: Abuse metadata services for credential discovery.
  • Service Account JSON Abuse: Exploit leaked GCP service account JSON files.
  • Use Case: After obtaining a credential, use this Skill to understand its grant and escalate privileges across cloud environments.

Quick Start

Use the cloud-iam-deep skill with an AWS access key and secret to retrieve the user's identity information.

Frequently Asked Questions about cloud-iam-deep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enumerate AWS IAM roles for cross-account assume role attacks after credential discovery?▼

To enumerate IAM for assume role chaining, provide an AWS access key and secret to analyze role trust policies and identify cross-account privilege escalation paths. The Skill executes STS AssumeRole chains to expand access across accounts.

What cloud platforms are supported for IAM red team enumeration and testing?▼

IAM red team enumeration supports AWS, Azure, and GCP cloud environments. It analyzes AWS IAM, Azure RBAC, and GCP IAM configurations to identify credential exploitation paths and privilege escalation opportunities.

Can I abuse IMDSv1 and IMDSv2 to extract cloud credentials during a red team engagement?▼

IMDSv1 and IMDSv2 abuses extract cloud credentials by targeting instance metadata service endpoints. This Skill exploits metadata services for credential discovery to enable post-credential privilege escalation.

Do I need AWS CLI, Azure CLI, and GCP SDK installed to test cloud IAM configurations?▼

Testing cloud IAM configurations requires AWS CLI, Azure CLI, GCP SDK, and associated cloud provider credentials installed. Dependencies also include boto3, azure-ad, and google-cloud libraries for API interaction.

How do I exploit leaked GCP service account JSON files for privilege escalation?▼

Exploiting leaked GCP service account JSON files uses embedded credentials to authenticate and enumerate GCP IAM permissions. This Skill analyzes the service account's grants to identify privilege escalation opportunities.

Related Skills

Explore More Software Engineering Skills→
jayjpatel9717jayjpatel9717

cloud-security-orchestration

Orchestrate cloud security assessments across AWS, Azure, and GCP.

Community
Advanced
infantesromeroadrianinfantesromeroadrian

pentest-ad-attacker

Execute Active Directory attacks and credential access techniques with Impacket, CrackMapExec, and Certipy.

Community
Advanced
zebbernzebbern
4.5k

Red Team Tools and Methodology

Automate red-team reconnaissance and vulnerability discovery workflows.

Community
Advanced
trilwutrilwu
109

exploiting-cloud-platforms

Discover and validate cloud misconfigurations and weak IAM permissions across AWS, Azure, and GCP.

Community
Advanced