cloud-misconfig

Automate discovery and assessment of cloud infrastructure misconfigurations across AWS, Azure, GCP, and Firebase.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/overtimepog/greyhatcc --skill cloud-misconfig
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cloud-misconfig
Source: https://github.com/overtimepog/greyhatcc/tree/main/skills/cloud-misconfig
Command: npx skills add https://github.com/overtimepog/greyhatcc --skill cloud-misconfig

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the detection of common cloud infrastructure misconfigurations, helping to secure cloud environments against data breaches and unauthorized access.

Core Features & Use Cases

  • Cloud Asset Discovery: Identifies misconfigured S3 buckets, Azure blobs, GCS buckets, Firebase projects, and Cognito pools.
  • SSRF & Metadata Exploitation: Detects and attempts to exploit Server-Side Request Forgery (SSRF) vulnerabilities to access cloud metadata.
  • Takeover Assessment: Identifies opportunities for bucket takeovers and dangling cloud resources.
  • Use Case: A security analyst can use this skill to scan a target domain for publicly accessible S3 buckets that might contain sensitive data or be vulnerable to takeover.

Quick Start

Use the cloud-misconfig skill to scan the domain example.com for misconfigurations.

Frequently Asked Questions about cloud-misconfig

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find publicly exposed S3 buckets and Azure blobs during a security assessment?

To find publicly exposed S3 buckets and Azure blobs, you can automate cloud misconfiguration discovery by analyzing recon artifacts and actively enumerating cloud services for misconfigured storage and public access settings.

What is the best way to detect SSRF vulnerabilities exposing cloud metadata?

The best way to detect SSRF vulnerabilities exposing cloud metadata is to automate the discovery and assessment process, which actively attempts to exploit Server-Side Request Forgery flaws to access sensitive cloud infrastructure metadata.

Can I scan Firebase projects and Cognito pools for takeover opportunities?

Yes, you can scan Firebase projects and Cognito pools for takeover opportunities by automating the assessment of cloud infrastructure misconfigurations to identify dangling cloud resources and vulnerable configurations.

Does this cloud misconfiguration scanner work across AWS, GCP, and Azure?

Yes, this cloud misconfiguration scanner works across AWS, GCP, and Azure by automating the discovery and assessment of misconfigured storage buckets and cloud services to help secure environments against unauthorized access.

How do I automate the discovery of dangling cloud resources vulnerable to takeover?

You can automate the discovery of dangling cloud resources vulnerable to takeover by running a cloud misconfiguration assessment that identifies takeover scenarios through active enumeration of cloud services and recon artifact analysis.

What kind of recon artifacts do I need to assess cloud infrastructure misconfigurations?

Assessing cloud infrastructure misconfigurations requires recon artifacts from target domains, which the scanner analyzes alongside active cloud service enumeration to identify exposed storage buckets and SSRF vulnerabilities.