Cloud Security

This is a comprehensive cloud pentesting playbook covering AWS, Azure, GCP, and Kubernetes exploitation. It walks through privilege escalation paths (iam:PassRole chains, metadata server abuse, confused deputy attacks), container escapes, and IaC misconfiguration hunting with tools like Pacu, Peirates, and Prowler. The source material is dense with actual commands and attack chains, from IMDSv2 bypasses to Lambda role escalation to Kubernetes privileged pod escapes. Use this when you're doing offensive cloud security work and need the specific AWS CLI incantations or GCP metadata endpoints without digging through scattered documentation. The kill chain mapping suggests it fits between recon and exploitation phases, which tracks with the content.

GitHub stars: 280
last updated: May 28, 2026

View on GitHub

Install

$ npx -y skills add hypnguyen1209/offensive-claude --skill cloud-security --agent claude-code

Installs into .claude/skills of the current project.

Files

Cloud Security & Attack

When to Activate

Cloud penetration test / red team against AWS, Azure (Entra ID), or GCP
IAM / identity privilege escalation and cross-account or cross-tenant pivoting
Compromised web app or SSRF reachable from cloud compute — harvest metadata credentials
Kubernetes / container assessment, node breakout, cluster takeover
CI/CD and IaC review: Terraform state, OIDC federation trust policies, pipeline secrets
Post-exploitation: secret extraction, lateral movement, persistence in cloud control plane