Performs comprehensive security assessments and penetration testing workflows for AWS cloud infrastructure.
This skill provides a structured methodology for auditing and testing Amazon Web Services environments. It guides users through initial enumeration, IAM permission analysis, and the discovery of privilege escalation paths like 'Shadow Admin' roles. It includes specific techniques for exploiting metadata SSRF (IMDSv1/v2), auditing S3 bucket permissions, extracting Lambda source code, and identifying persistence mechanisms, making it an essential companion for red team operations and security audits.
Key Features
01Security auditing integration with Prowler, ScoutSuite, and Pacu
020 GitHub stars
03S3 bucket discovery and automated permission auditing
04Metadata SSRF exploitation for EC2 and Fargate (IMDSv1 & IMDSv2)
05Lambda and EC2 exploitation including code extraction and EBS mounting
06Comprehensive IAM enumeration and privilege escalation discovery
Use Cases
01Validating the effectiveness of AWS security controls and GuardDuty alerts
02Red team engagements targeting cloud-native AWS environments
03Internal security audits to identify IAM misconfigurations
