exploiting-cloud-platforms

Discover and validate cloud misconfigurations and weak IAM permissions across AWS, Azure, and GCP.

109|11|Updated Nov 13, 2025

Search Tags:#aws #gcp #azure #pentesting #cloud-security #iam-escalation

Ready to run

npx skills add https://github.com/trilwu/secskills --skill exploiting-cloud-platforms

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: exploiting-cloud-platforms
Source: https://github.com/trilwu/secskills/tree/main/secskills/skills/cloud-security
Command: npx skills add https://github.com/trilwu/secskills --skill exploiting-cloud-platforms

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Cloud misconfigurations and IAM privilege flaws across AWS, Azure, and GCP expose data, credentials, and services to unauthorized access. This Skill provides structured methods to identify, assess, and exploit misconfigurations to validate security controls.

Core Features & Use Cases

Cloud platform reconnaissance and misconfiguration checks across AWS, Azure, and GCP.
IAM privilege escalation and metadata service abuse simulations for post-exploitation testing.
Step-by-step scenario guidance for common cloud environments and services (S3/Blob storage, Lambda, Function Apps, etc).

Quick Start

Identify misconfigurations, enumerate cloud services, and validate IAM privilege escalation across AWS, Azure, and GCP in a controlled testing engagement.

Frequently Asked Questions about exploiting-cloud-platforms

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I find and exploit IAM privilege escalation paths in AWS, Azure, or GCP?▼

To find IAM privilege escalation paths across AWS, Azure, and GCP, you perform hands-on enumeration of weak permissions and simulate post-exploitation scenarios. This validates your cloud security controls against unauthorized access vectors.

What are common cloud misconfigurations to check for during a pentest?▼

Common cloud misconfigurations include exposed S3 and Blob storage, overly permissive IAM roles, vulnerable serverless functions, and metadata service abuse. Identifying these flaws validates exposure to unauthorized access.

How do I test for cloud metadata service abuse scenarios?▼

Testing for cloud metadata service abuse involves simulating exploitation scenarios during red-team engagements to extract credentials. This validates whether your instances and serverless functions are vulnerable to SSRF-based attacks.

Can I use this approach for ongoing cloud posture reviews across multiple providers?▼

Yes, this approach applies to ongoing cloud posture reviews across AWS, Azure, and GCP. It provides structured reconnaissance and misconfiguration checks to continuously identify weak IAM permissions and validate security controls.

What is the best way to enumerate cloud services during a security assessment?▼

The best way to enumerate cloud services is using structured step-by-step scenario guidance for common environments. This hands-on enumeration uncovers misconfigurations in storage, IAM roles, and serverless functions.

Does this method provide command examples for validating serverless function vulnerabilities?▼

Yes, this method provides practical command examples and scenario guidance for validating vulnerabilities in serverless functions like Lambda and Function Apps. It supports controlled exploitation workflows during red-team engagements.