Ejecuta cualquier Skill en Manus
con un clic

Ejecuta cualquier Skill en Manus con un clic

Comenzar

cloud-containers

Estrellas3

Forks1

Actualizado11 de mayo de 2026 a las 07:02

Cloud and container security testing - AWS, Azure, GCP, Docker, and Kubernetes misconfigurations and exploitation.

Instalación

Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.

Ejecutar en Manus

Fuente

LeoWSY-hashblue

LeoWSY-hashblue/-communitytools-custom

Abrir repositorio de GitHub Ver repositorios del creador

Descarga

Ejecutar en Manus

Ocupaciones relacionadasSOC

Basado en la clasificación ocupacional SOC

Analistas de seguridad de la informaciónOcupaciones informáticas y matemáticas·SOC 15-1212

Explorador de archivos

10 archivos

SKILL.md

readonly

name	cloud-containers
description	Cloud and container security testing - AWS, Azure, GCP, Docker, and Kubernetes misconfigurations and exploitation.

Cloud & Containers

Test cloud infrastructure and container environments for security misconfigurations and exploitation paths.

Techniques

Platform	Key Vectors
AWS	S3 bucket exposure, IAM misconfig, metadata service, Lambda abuse
Azure	Blob storage, RBAC flaws, managed identity, App Service misconfig
GCP	Cloud Storage, service account keys, metadata server, IAM
Docker	Container escape, privileged mode, socket exposure, image vulnerabilities
Kubernetes	RBAC bypass, secret exposure, pod escape, API server access

Workflow

Enumerate cloud resources and services
Test IAM/RBAC configurations
Check storage and secrets exposure
Test container isolation and escape paths
Document findings with cloud-specific evidence

Reference

reference/cloud-security.md - Platform-specific attack guides (AWS, Azure, GCP, Docker, K8s)

Más de este repositorio

mismo repositorio

authentication

LeoWSY-hashblue/-communitytools-custom

Authentication security testing - auth bypass, JWT attacks, OAuth flaws, password attacks, 2FA bypass, CAPTCHA bypass, and bot detection evasion.

2026-05-263

evasion

LeoWSY-hashblue/-communitytools-custom

AV/EDR evasion and detection bypass — AMSI, ETW, API unhooking, process injection, AppLocker bypass, LOLBins, shellcode obfuscation.

2026-05-263

exchange-sharepoint

LeoWSY-hashblue/-communitytools-custom

Microsoft Exchange and SharePoint attack techniques — enumeration, ProxyLogon/ProxyShell/ProxyToken exploitation, mailbox access, SharePoint file exfiltration.

2026-05-263

system

LeoWSY-hashblue/-communitytools-custom

System exploitation testing - Active Directory attacks, privilege escalation (Linux/Windows), and exploit development.

2026-05-263

tunneling

LeoWSY-hashblue/-communitytools-custom

Internal network pivoting and traffic tunneling — FRP, Chisel, Ligolo-ng, SSH, ReGeorg, DNS tunneling, EarthWorm, Ngrok.

2026-05-263

ai-threat-testing

LeoWSY-hashblue/-communitytools-custom

Offensive AI security testing and exploitation framework. Systematically tests LLM applications for OWASP Top 10 vulnerabilities including prompt injection, model extraction, data poisoning, and supply chain attacks. Integrates with pentest workflows to discover and exploit AI-specific threats.

2026-05-113

name	cloud-containers
description	Cloud and container security testing - AWS, Azure, GCP, Docker, and Kubernetes misconfigurations and exploitation.

Cloud & Containers

Test cloud infrastructure and container environments for security misconfigurations and exploitation paths.

Techniques

Platform	Key Vectors
AWS	S3 bucket exposure, IAM misconfig, metadata service, Lambda abuse
Azure	Blob storage, RBAC flaws, managed identity, App Service misconfig
GCP	Cloud Storage, service account keys, metadata server, IAM
Docker	Container escape, privileged mode, socket exposure, image vulnerabilities
Kubernetes	RBAC bypass, secret exposure, pod escape, API server access

Workflow

Enumerate cloud resources and services
Test IAM/RBAC configurations
Check storage and secrets exposure
Test container isolation and escape paths
Document findings with cloud-specific evidence

Reference

reference/cloud-security.md - Platform-specific attack guides (AWS, Azure, GCP, Docker, K8s)