skills.rest
Carlos-Reyes-UTP
Carlos-Reyes-UTPCOMMUNITY
Explore all skills by this author →
GitHub

hunt-cloud-misconfig

Enumerate cloud misconfigurations enabling unauthorized access across storage, compute, and CI/CD platforms.

2|Updated Apr 11, 2025
Search Tags:#ci/cd#kubernetes#security validation#ssrf#aws s3#cloud misconfiguration#infrastructure exposure
One-click install
npx skills add https://github.com/Carlos-Reyes-UTP/Desarrollo-de-Sistema-de-Ventas-Empresas-de-Moda --skill hunt-cloud-misconfig-carlos-reyes-utp
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-cloud-misconfig
Source: https://github.com/Carlos-Reyes-UTP/Desarrollo-de-Sistema-de-Ventas-Empresas-de-Moda/tree/main/.agent/skills/hunt-cloud-misconfig
Command: npx skills add https://github.com/Carlos-Reyes-UTP/Desarrollo-de-Sistema-de-Ventas-Empresas-de-Moda --skill hunt-cloud-misconfig-carlos-reyes-utp

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It helps security teams discover high-impact cloud and infrastructure misconfigurations that expose sensitive services or enable data access without credentials.

Core Features & Use Cases

  • Public storage exposure discovery (S3/GCS/Azure Blob/Firebase): Identifies anonymously accessible buckets/objects, public-write misconfigurations, and exposed database-like endpoints such as Firebase.
  • Metadata and service exposure checks: Detects SSRF-amplifiable internal risks like IMDS credential leakage, plus publicly reachable admin panels and management surfaces.
  • CI/CD and container platform misconfig hunt: Checks for risky public CI endpoints (Jenkins/GitLab), container/Kubernetes control-plane exposure (e.g., kubelet, etcd, dashboards), and common insecure service bindings (e.g., Docker daemon 2375).
  • Validation guidance via local simulation: Provides a LocalStack-based workflow to verify findings safely before/while validating against real cloud environments.

Quick Start

Use the hunt-cloud-misconfig skill to enumerate target cloud and infrastructure misconfigurations (S3/GCS/Azure, IMDS via SSRF, public admin panels, and CI/CD exposure) and validate each claim with a unique write/read marker when write access is suspected.

Frequently Asked Questions about hunt-cloud-misconfig

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find cloud misconfigurations that expose sensitive infrastructure?▼

To find cloud misconfigurations, you enumerate target infrastructure for unauthorized access paths across storage, compute, metadata services, admin panels, CI/CD, and container platforms using targeted validation steps.

Can I check for SSRF to IMDS credential leakage in AWS?▼

Yes, you can check for SSRF-amplifiable internal risks like IMDS credential leakage in AWS by applying targeted enumeration and validation steps to detect metadata service exposure.

How do I validate public write access on S3 buckets safely?▼

You validate public write access on S3 buckets by verifying findings with a unique write and read marker, ensuring safe local simulation via LocalStack for deterministic reproduction before testing real environments.

Does this work for finding Kubernetes control-plane exposures like etcd or kubelet?▼

Yes, it hunts for container and Kubernetes control-plane exposures, specifically checking for publicly reachable kubelet, etcd, dashboards, and insecure service bindings like the Docker daemon on port 2375.

What is the best way to discover public storage exposure across AWS, GCP, and Azure?▼

The best way to discover public storage exposure is by identifying anonymously accessible buckets and objects, public-write misconfigurations, and exposed endpoints across AWS S3, GCP storage, and Azure blobs.

Can I use LocalStack to simulate cloud security validation locally?▼

Yes, you can use LocalStack to simulate cloud security validation locally, providing a deterministic workflow to safely verify misconfiguration findings before validating against real cloud environments.

Related Skills

Explore More Software Engineering Skills→
phuetzphuetz
30

terraform-ansible

Provision cloud infrastructure with Terraform and configure it using Ansible playbooks.

Community
Advanced
ersinkocersinkoc
2

Cloud Storage Misconfiguration Testing

Automate cloud storage misconfiguration testing across AWS S3, Azure Blob, and Google Cloud Storage.

Community
Advanced
zebbernzebbern
4.5k

AWS Penetration Testing

Enumerate AWS IAM misconfigurations and privilege escalation paths.

Community
Advanced
salmanabdurrahmansalmanabdurrahman

cloud-iam-review

Analyzes cloud IAM policies and IaC definitions for excessive permissions, privilege escalation paths, and public exposure across AWS, GCP, and Azure.

Community
Advanced