skills.rest
uphiago
uphiagoCOMMUNITY
Explore all skills by this author →
Website𝕏@uphiagoGitHub

cloud-iam-deep

Exploit misconfigured cloud IAM, serverless, and storage resources across GCP, AWS, and Azure.

1.1k|191|Updated Jun 24, 2026
Search Tags:#serverless#aws#gcp#azure#pentest#cloud-iam#storage-enumeration
One-click install
npx skills add https://github.com/uphiago/recon-skills --skill cloud-iam-deep-uphiago
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cloud-iam-deep
Source: https://github.com/uphiago/recon-skills/tree/main/redteam/cloud-iam-deep
Command: npx skills add https://github.com/uphiago/recon-skills --skill cloud-iam-deep-uphiago

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill eliminates the manual effort of identifying and exploiting cloud IAM misconfigurations, exposed serverless functions, and public storage resources across GCP, AWS, and Azure after initial credential or endpoint discovery during authorized penetration tests.

Core Features & Use Cases

  • Multi-Cloud IAM Exploitation: Enumerate IAM policies, escalate service account privileges, and generate valid GCP access tokens from leaked SA keys.
  • Serverless & Storage Resource Testing: Test for unauthenticated access to Cloud Functions, Cloud Run, S3 buckets, MinIO instances, Azure Blob Storage, and Firebase/Firestore projects, with validated real-world exploitation paths from 25+ field tests.
  • Artifact & Source Code Analysis: Download and inspect container images from Artifact Registry and source code buckets for embedded secrets.

Quick Start

Use the cloud-iam-deep skill to test for unauthenticated access and enumerate all accessible resources in a target GCP project after obtaining a valid service account key.

Frequently Asked Questions about cloud-iam-deep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enumerate cloud IAM misconfigurations across AWS, GCP, and Azure after finding leaked credentials?▼

To enumerate cloud IAM misconfigurations, use this Skill to retrieve IAM policies, escalate service account privileges, and generate valid GCP access tokens from leaked SA keys across AWS, GCP, and Azure environments.

What's the best way to test for unauthenticated access to GCP Cloud Functions and Cloud Run services?▼

The best way to test unauthenticated access to GCP Cloud Functions and Cloud Run is by using this Skill to list services and validate real-world exploitation paths based on field-tested penetration techniques.

How can I check public S3, MinIO, and Azure Blob Storage buckets for data exposure during a pentest?▼

You can check for storage data exposure by applying this Skill to test public S3 buckets, MinIO instances, and Azure Blob Storage, validating unauthenticated access and enumeration paths during authorized penetration tests.

Does this approach work for extracting secrets from Artifact Registry container images?▼

Yes, this approach works for extracting secrets by downloading and inspecting container images from Artifact Registry and source code buckets to locate embedded credentials and validate cloud resource exposure.

Can I generate valid GCP access tokens from leaked service account keys?▼

You can generate valid GCP access tokens from leaked service account keys by executing the provided code snippets within this Skill to authenticate and enumerate accessible resources in the target project.

Related Skills

Explore More Software Engineering Skills→
chatbotkitchatbotkit
13

cloud-iam-deep

Identifies and exploits cloud IAM credential exposures across AWS, Azure, and GCP.

Official
Advanced
hoanghn61hoanghn61

cloud-containers

Assess cloud and container environments for security misconfigurations and exploitation paths.

Community
Advanced
ersinkocersinkoc
2

Cloud Storage Misconfiguration Testing

Automate cloud storage misconfiguration testing across AWS S3, Azure Blob, and Google Cloud Storage.

Community
Advanced
uphiagouphiago
1.1k

hunt-cloud-misconfig

Detect cloud misconfigurations across AWS, GCP, and Azure environments.

Community
Advanced