Cloud Penetration Testing

This is a comprehensive template for authorized cloud security assessments across Azure, AWS, and GCP. It covers the full penetration testing workflow from reconnaissance and authentication testing through privilege escalation and persistence techniques. Comes with installation scripts for Azure PowerShell modules, AWS CLI, and presumably GCP tooling. Worth noting it failed Gen Agent Trust Hub and Snyk security audits, which is somewhat ironic for a pentesting tool but likely flags the aggressive security testing capabilities. Use this if you're conducting legitimate security engagements and need a structured approach to cloud infrastructure assessment. The scope is ambitious, so expect to customize heavily for your specific environment and compliance requirements.

GitHub stars: 30.2K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add davila7/claude-code-templates --skill 'Cloud Penetration Testing' --agent claude-code

Installs into .claude/skills of the current project.

Files

Cloud Penetration Testing

Purpose

Conduct comprehensive security assessments of cloud infrastructure across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill covers reconnaissance, authentication testing, resource enumeration, privilege escalation, data extraction, and persistence techniques for authorized cloud security engagements.

Prerequisites

Required Tools

# Azure tools
Install-Module -Name Az -AllowClobber -Force
Install-Module -Name MSOnline -Force
Install-Module -Name AzureAD -Force

# AWS CLI
curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
unzip awscliv2.zip && sudo ./aws/install

# GCP CLI
curl https://sdk.cloud.google.com | bash
gcloud init

# Additional tools
pip install scoutsuite pacu