cloud-penetration-testing

Conduct comprehensive security assessments of cloud infrastructure across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill covers reconnaissance, authentication testing, resource enumeration, privilege escalation, data extraction, and persistence techniques for authorized cloud security engagements. Gather initial information about target cloud presence: Authenticate to Azure environments: Discover Azure resources and permissions: Exploit Azure misconfigurations: Establish persistence in Azure: Authenticate to AWS environments: Discover AWS resources: Exploit AWS misconfigurations: Establish persistence in AWS: Discover GCP resources: Exploit GCP misconfigurations: Scenario: Test Azure AD password policy Scenario: Find and access misconfigured S3 buckets Scenario: Pivot using compromised service account This skill is applicable to execute the workflow or actions described in the overview. - Cloud architecture fundamentals - Identity and Access Management (IAM) - API authentication mechanisms - DevOps and automation concepts - Written authorization for testing - Test credentials or access tokens - Defined scope and rules of engagement - Cloud Security Assessment Report - Comprehensive findings and risk ratings - Resource Inventory - Enumerated services, storage, and compute instances - Credential Findings - Exposed secrets, keys, and...