Exécutez n'importe quel Skill dans Manus
en un clic

Exécutez n'importe quel Skill dans Manus en un clic

Commencer

cloud-containers

Étoiles3

Forks1

Mis à jour11 mai 2026 à 07:02

Cloud and container security testing - AWS, Azure, GCP, Docker, and Kubernetes misconfigurations and exploitation.

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Exécuter dans Manus

Source

LeoWSY-hashblue

LeoWSY-hashblue/-communitytools-custom

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Exécuter dans Manus

Métiers associésSOC

Basé sur la classification professionnelle SOC

Analystes en sécurité de l'informationProfessions informatiques et mathématiques·SOC 15-1212

Explorateur de fichiers

10 fichiers

SKILL.md

readonly

name	cloud-containers
description	Cloud and container security testing - AWS, Azure, GCP, Docker, and Kubernetes misconfigurations and exploitation.

Cloud & Containers

Test cloud infrastructure and container environments for security misconfigurations and exploitation paths.

Techniques

Platform	Key Vectors
AWS	S3 bucket exposure, IAM misconfig, metadata service, Lambda abuse
Azure	Blob storage, RBAC flaws, managed identity, App Service misconfig
GCP	Cloud Storage, service account keys, metadata server, IAM
Docker	Container escape, privileged mode, socket exposure, image vulnerabilities
Kubernetes	RBAC bypass, secret exposure, pod escape, API server access

Workflow

Enumerate cloud resources and services
Test IAM/RBAC configurations
Check storage and secrets exposure
Test container isolation and escape paths
Document findings with cloud-specific evidence

Reference

reference/cloud-security.md - Platform-specific attack guides (AWS, Azure, GCP, Docker, K8s)

Plus depuis ce dépôt

même dépôt

authentication

LeoWSY-hashblue/-communitytools-custom

Authentication security testing - auth bypass, JWT attacks, OAuth flaws, password attacks, 2FA bypass, CAPTCHA bypass, and bot detection evasion.

2026-05-263

evasion

LeoWSY-hashblue/-communitytools-custom

AV/EDR evasion and detection bypass — AMSI, ETW, API unhooking, process injection, AppLocker bypass, LOLBins, shellcode obfuscation.

2026-05-263

exchange-sharepoint

LeoWSY-hashblue/-communitytools-custom

Microsoft Exchange and SharePoint attack techniques — enumeration, ProxyLogon/ProxyShell/ProxyToken exploitation, mailbox access, SharePoint file exfiltration.

2026-05-263

system

LeoWSY-hashblue/-communitytools-custom

System exploitation testing - Active Directory attacks, privilege escalation (Linux/Windows), and exploit development.

2026-05-263

tunneling

LeoWSY-hashblue/-communitytools-custom

Internal network pivoting and traffic tunneling — FRP, Chisel, Ligolo-ng, SSH, ReGeorg, DNS tunneling, EarthWorm, Ngrok.

2026-05-263

ai-threat-testing

LeoWSY-hashblue/-communitytools-custom

Offensive AI security testing and exploitation framework. Systematically tests LLM applications for OWASP Top 10 vulnerabilities including prompt injection, model extraction, data poisoning, and supply chain attacks. Integrates with pentest workflows to discover and exploit AI-specific threats.

2026-05-113

name	cloud-containers
description	Cloud and container security testing - AWS, Azure, GCP, Docker, and Kubernetes misconfigurations and exploitation.

Cloud & Containers

Test cloud infrastructure and container environments for security misconfigurations and exploitation paths.

Techniques

Platform	Key Vectors
AWS	S3 bucket exposure, IAM misconfig, metadata service, Lambda abuse
Azure	Blob storage, RBAC flaws, managed identity, App Service misconfig
GCP	Cloud Storage, service account keys, metadata server, IAM
Docker	Container escape, privileged mode, socket exposure, image vulnerabilities
Kubernetes	RBAC bypass, secret exposure, pod escape, API server access

Workflow

Enumerate cloud resources and services
Test IAM/RBAC configurations
Check storage and secrets exposure
Test container isolation and escape paths
Document findings with cloud-specific evidence

Reference

reference/cloud-security.md - Platform-specific attack guides (AWS, Azure, GCP, Docker, K8s)