0x002132 Skills Bugbounty Cloud Iam Deep — DevOps skill for Claude Code
Cloud IAM red-team attack chain across AWS, Azure, GCP — focused on EXTERNAL exploitation paths and post-credential-discovery privilege analysis.
How to install 0x002132 Skills Bugbounty Cloud Iam Deep
Installs to ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-cloud-iam-deep/SKILL.md
mkdir -p ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-cloud-iam-deep && curl -fsSL https://raw.githubusercontent.com/S1N6H/Bug-Bounty-Skills/HEAD/skills/0x002132-skills-bugbounty-cloud-iam-deep.md -o ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-cloud-iam-deep/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What 0x002132 Skills Bugbounty Cloud Iam Deep does
name: cloud-iam-deep description: Cloud IAM red-team attack chain across AWS, Azure, GCP — focused on EXTERNAL exploitation paths and post-credential-discovery privilege analysis. Covers IAM enumeration (aws iam, az role, gcloud iam), STS/AssumeRole chaining, Azure Managed Identity abuse (via SSRF/leak), GCP service account JSON abuse, IMDSv1/v2 attacks via SSRF, K8s ServiceAccount token exfil, role-trust-policy confused-deputy, cross-account assume-role enumeration, IAM privilege escalation
Alternatives in DevOps
- Deployment Guide — Production deployment guide for Claude Code Agent Monitor 52 ★
- AWS Profile — AWS profile management for MCP servers — discover profiles across SSO, Granted, and assumed-role chains, check 40 ★
- AWS — AWS patterns and best practices 38 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
0x002132 Skills Bugbounty Hunt Cloud Misconfig
Hunt cloud / infrastructure misconfigurations. AWS: public S3 buckets (s3:GetObject anonymous), permissive buc
Docker Build
Build hardened multi-stage Docker images, lint Dockerfiles, and verify minimal attack surfaces.
Sandbox Shell
macOS Seatbelt sandbox CLI for developers. Protect credentials (SSH, AWS, GPG) from malicious npm packages, su
Stt MCP Server Linux
by marcindulak - A push-to-talk speech transcription setup for Linux using a Python MCP server. Runs locally i
Check Forbidden Markers
Pre-deploy gate that scans built JS chunks for forbidden substring markers (saga-era / obsolete code paths) li
Lockdown
Per-repo supply-chain hardening — detects the package managers, Dockerfiles, and CI in use, then guides you th
Related Agents
Cloud Attacker
Cloud penetration testing specialist for AWS, Azure, and GCP. Handles IAM enumeration, privilege escalation, S
Cloud Security
Delegates to this agent when the user asks about cloud security testing, AWS/Azure/GCP penetration testing, cl
Cloud Engineer
Designs and implements cloud infrastructure using Infrastructure as Code (Terraform, CDK). Manages VPC, IAM, d
