Menu
Auth/lab ref: AWS CLI v2 for interacting with AWS services from the terminal.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
| name | aws-cli |
| description | Auth/lab ref: AWS CLI v2 for interacting with AWS services from the terminal. |
| compatibility | Linux, Windows, macOS; AWS CLI version 2 recommended. |
| metadata | {"author":"AeonDave","version":"1.0"} |
Cloud control-plane access from a shell. Great for enumeration, dangerous for the incautious.
Use AWS CLI when you need to:
# Confirm version and identity
aws --version
aws sts get-caller-identity
# List S3 buckets and EC2 instances
aws s3 ls
aws ec2 describe-instances --output json
aws sts get-caller-identity --profile default
aws configure list
aws s3 ls
aws iam list-users
aws ec2 describe-instances --region us-east-1 --output json
aws lambda list-functions --output json
aws ec2 describe-instances --query "Reservations[].Instances[].InstanceId" --output text
aws s3api list-buckets --output json
--profile and --region in notes, scripts, and repeatable workflows.s3 ls and s3api list-buckets together usually answer the first bucket-discovery question quickly.No bundled scripts/, references/, or assets/.
Use the AWS CLI v2 user guide for install, auth, profile precedence, and service-specific commands.
Drive the MCPwn Kali-backed MCP server cleanly and fast: create a session, discover tools via the catalog (list_catalog/get_tools/get_tool/run_tool) instead of guessing names, pick the right execution path (execute_command vs detach+poll_job vs interactive shell), move files with the correct mechanism (write_workspace_file, request_upload/request_download data plane, import_artifact_to_workspace, upload_to_target, list_payloads/get_payload), and bring up connectivity (tunnel_up VPN/proxy/forward, tunnel_revshell, penelope reverse shells, run_in_shell/stabilize_shell). Use whenever running MCPwn / mcpwn_* tools, a Kali MCP, or when a run stalls on timeouts, lost output, missing routes, wrong tool names, or clumsy file transfer.
Keep the context window lean when reading large data. Use before opening big files, logs, dumps, PCAPs, decompiler output, research corpora, or a folder of worker artifacts. Enforces grep-first + windowed reads, extract-don't-hoard, and context quarantine (delegate a huge read to a sub-agent that returns a digest).
Auth assessment: web impact-validation; SQLi, SSTI, XXE, command injection, SSRF, XSS, uploads, deserialization, smuggling, WAF/parser checks.
Mode: /1337 - structured operator behaviour for coding and security; forces explicit reasoning, fast decisions, todos/lists, exact terms, evidence, verification, safety override.
Lab/CTF: pwn/binary challenges; native binaries, memory corruption, format strings, heap/ROP/SROP, shellcode artifacts, seccomp, kernel labs.
Auth/lab: reverse engineering methodology; malware triage, patch diffing, firmware/protocol RE, protections, exploitability handoff evidence.