AWS Penetration Testing

This is a red team toolkit for AWS cloud environments that walks you through IAM enumeration, privilege escalation, SSRF attacks against metadata endpoints, S3 exploitation, and Lambda code extraction. You'll need AWS CLI configured and at least low-privilege credentials to start. It's built to work with standard pentest tools like Pacu, Prowler, ScoutSuite, and SkyArk. Worth noting this failed a couple security audits (Gen Agent Trust Hub and Snyk), which is somewhat ironic for a security testing tool but likely flagged for the offensive techniques it documents. Use it if you're doing authorized AWS security assessments and want comprehensive attack vectors in one place.

GitHub stars: 30.2K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add davila7/claude-code-templates --skill 'AWS Penetration Testing' --agent claude-code

Installs into .claude/skills of the current project.

Files

AWS Penetration Testing

Purpose

Provide comprehensive techniques for penetration testing AWS cloud environments. Covers IAM enumeration, privilege escalation, SSRF to metadata endpoint, S3 bucket exploitation, Lambda code extraction, and persistence techniques for red team operations.