What are the key deliverables from a cloud penetration test?

You receive four deliverables: a Cloud Security Assessment Report with findings and risk ratings, a Resource Inventory of services and instances, Credential Findings documenting exposed secrets and misconfigurations, and Remediation Recommendations for platform-specific hardening.

What tools and CLIs does this skill integrate with?

The skill integrates with Azure PowerShell modules (Az, MSOnline, AzureAD), AWS CLI, GCP CLI (gcloud), and additional tools like ScoutSuite and Pacu for automated cloud security auditing.

What authorization and prerequisites are required to use this skill?

You must have written authorization for testing, test credentials or access tokens, and a defined scope with rules of engagement. You also need cloud architecture fundamentals knowledge, understanding of IAM, API authentication mechanisms, and DevOps concepts.

Skill

Perform Cloud Penetration Tests

Name: Cloud Penetration Testing
Availability: OnlineOnly
Author: Antigravity

Cloud Penetration Testing skill conducts authorized security assessments of Azure, AWS, and GCP infrastructure through reconnaissance, enumeration

Get skill

Works with azure aws gcp githubpowershell

Antigravity

Own this? Claim it

Spark score

out of 100

Updated 29 days ago

Version 14.1.0

Add to Favorites

Why it matters

Conduct comprehensive security assessments of cloud infrastructure across Azure, AWS, and GCP. Identify vulnerabilities, enumerate resources, and test authentication and privilege escalation for authorized engagements.

Outcomes

What it gets done

Perform reconnaissance and resource enumeration across cloud platforms.

Test authentication mechanisms and identify exposed credentials.

Execute privilege escalation and persistence techniques.

Generate detailed security assessment reports with remediation recommendations.

Install

Add it to your toolbox

Run in your project directory:

curl -fsSL https://spark.entire.vc/get/ag-cloud-penetration-testing | bash

Overview

Cloud Penetration Testing

Cloud Penetration Testing conducts comprehensive security assessments across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). The skill covers reconnaissance of cloud presence, authentication testing, resource enumeration, privilege escalation, data extraction, and persistence techniques for authorized cloud security engagements. Use this skill when you have written authorization for security assessments, test credentials or access tokens, and a defined scope with rules of engagement. Apply it for authorized penetration tests of cloud infrastructure, defensive validation exercises, or controlled educational environments. Do NOT use this skill without explicit written authorization, against production systems without approval, or outside the defined scope and rules of engagement.

What it does

When to use - and when NOT to

Use this skill when you have written authorization for security assessments, test credentials or access tokens, and a defined scope with rules of engagement. Apply it for authorized penetration tests of cloud infrastructure, defensive validation exercises, or controlled educational environments. Do NOT use this skill without explicit written authorization, against production systems without approval, or outside the defined scope and rules of engagement.

Inputs and outputs

You provide written authorization for testing, test credentials or access tokens, and a defined scope with rules of engagement. The skill requires cloud architecture fundamentals knowledge, understanding of Identity and Access Management (IAM), API authentication mechanisms, and DevOps concepts.

You receive four key deliverables: a Cloud Security Assessment Report with comprehensive findings and risk ratings, a Resource Inventory enumerating services, storage, and compute instances, Credential Findings documenting exposed secrets, keys, and misconfigurations, and Remediation Recommendations providing hardening guidance per platform.

Integrations

The skill integrates with Azure PowerShell modules (Az, MSOnline, AzureAD) for Azure assessments, AWS CLI for Amazon Web Services testing, and GCP CLI (gcloud) for Google Cloud Platform engagements. Additional tools include ScoutSuite and Pacu for automated cloud security auditing.

Installation example:

# Azure tools
Install-Module -Name Az -AllowClobber -Force
Install-Module -Name MSOnline -Force
Install-Module -Name AzureAD -Force

# AWS CLI
curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
unzip awscliv2.zip && sudo ./aws/install

# GCP CLI
tmpdir="$(mktemp -d)"
trap 'rm -rf "$tmpdir"' EXIT
curl -fsSLo "$tmpdir/google-cloud-sdk-install.sh" https://sdk.cloud.google.com
cat "$tmpdir/google-cloud-sdk-install.sh"  # review the full installer before executing
bash "$tmpdir/google-cloud-sdk-install.sh"
gcloud init

# Additional tools
pip install scoutsuite pacu

Reconnaissance workflow:

# Azure: Get federation info
curl "https://login.microsoftonline.com/getuserrealm.srf?login=user@target.com&xml=1"

# Azure: Get Tenant ID
curl "https://login.microsoftonline.com/target.com/v2.0/.well-known/openid-configuration"

# Enumerate cloud resources by company name
python3 cloud_enum.py -k targetcompany

# Check IP against cloud providers
cat ips.txt | python3 ip2provider.py

Who it's for

This skill is intended for authorized security assessments, defensive validation, or controlled educational environments. It requires offensive security expertise combined with cloud platform knowledge.

Source README

Conduct comprehensive security assessments of cloud infrastructure across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill covers reconnaissance, authentication testing, resource enumeration, privilege escalation, data extraction, and persistence techniques for authorized cloud security engagements.

FAQ

Common questions

Discussion