Initial commit - 611 cybersecurity skills across all subdomains

skills/conducting-cloud-infrastructure-penetration-test/references/standards.md

@@ -0,0 +1,12 @@
+# Standards — Cloud Infrastructure Penetration Testing
+
+## Cloud Provider Policies
+- AWS: https://aws.amazon.com/security/penetration-testing/
+- Azure: https://learn.microsoft.com/en-us/azure/security/fundamentals/pen-testing
+- GCP: https://cloud.google.com/terms/aup
+
+## Frameworks
+- CIS Benchmarks for AWS/Azure/GCP
+- NIST SP 800-144: Guidelines on Security and Privacy in Public Cloud Computing
+- CSA Cloud Controls Matrix (CCM)
+- MITRE ATT&CK Cloud Matrix: https://attack.mitre.org/matrices/enterprise/cloud/

skills/conducting-cloud-infrastructure-penetration-test/references/workflows.md

@@ -0,0 +1,13 @@
+# Workflows — Cloud Infrastructure Penetration Testing
+
+## Attack Flow
+```
+Cloud Credentials / Unauthenticated
+    │
+    ├── IAM Enumeration (permissions, roles, policies)
+    ├── Resource Discovery (compute, storage, serverless)
+    ├── Privilege Escalation (IAM chaining, role assumption)
+    ├── Data Access (storage buckets, databases, secrets)
+    ├── Lateral Movement (cross-account, cross-service)
+    └── Impact Demonstration (data exfiltration proof)
+```