mirror of
https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
synced 2026-07-16 04:35:18 +03:00
mukul975
c47eed6a64
- Fix 25 shell=True subprocess calls with list-based commands - Fix 49 verify=False in defensive skills (env-var override) - Add timeout to 231 HTTP/subprocess/socket calls - Fix 6 SQL injection patterns with whitelist validation - Replace 8 __import__() with standard imports - Remove 701 unused imports across 442 files - Add authorized-testing disclaimers to all offensive skills - Complete 11 incomplete skill directories - Expand 10 stub SKILL.md files with full content - Fix 2 YAML parse errors in frontmatter - Fix 5 pre-existing syntax errors - Convert 22 hardcoded paths/ports to environment variables - Back up 21 redundant skill pairs to .bak - Fix 2 global declaration errors - 724/724 skills with full folder anatomy (SKILL.md + agent.py + api-reference.md + LICENSE) - 0 compile errors across all 724 agent.py files
48 lines
1.9 KiB
Markdown
48 lines
1.9 KiB
Markdown
# Cloud Infrastructure Penetration Test — API Reference
|
|
|
|
## Libraries
|
|
|
|
| Library | Install | Purpose |
|
|
|---------|---------|---------|
|
|
| boto3 | `pip install boto3` | AWS SDK for Python — EC2, S3, IAM, security group enumeration |
|
|
| ScoutSuite | `pip install scoutsuite` | Multi-cloud security auditing tool |
|
|
| pacu | `pip install pacu` | AWS exploitation framework for penetration testing |
|
|
|
|
## Key boto3 Methods
|
|
|
|
| Method | Description |
|
|
|--------|-------------|
|
|
| `ec2.describe_security_groups()` | List all security groups with inbound/outbound rules |
|
|
| `ec2.describe_instances()` | Enumerate EC2 instances with metadata options |
|
|
| `s3.list_buckets()` | List all S3 buckets in the account |
|
|
| `s3.get_bucket_acl(Bucket=name)` | Check bucket ACL for public access grants |
|
|
| `s3.get_bucket_policy(Bucket=name)` | Retrieve bucket resource policy JSON |
|
|
| `iam.list_users()` | Enumerate all IAM users |
|
|
| `iam.list_attached_user_policies(UserName=u)` | List managed policies attached to a user |
|
|
| `iam.list_access_keys(UserName=u)` | List access keys with creation dates |
|
|
| `iam.simulate_principal_policy()` | Test effective permissions for a principal |
|
|
| `sts.get_caller_identity()` | Identify current credentials (account, ARN) |
|
|
|
|
## ScoutSuite CLI
|
|
|
|
```bash
|
|
scout aws --no-browser --report-dir ./report
|
|
scout azure --cli --no-browser
|
|
scout gcp --no-browser
|
|
```
|
|
|
|
## Key Constants
|
|
|
|
| Constant | Value |
|
|
|----------|-------|
|
|
| IMDSv2 required | `HttpTokens: "required"` |
|
|
| Public ACL URI | `http://acs.amazonaws.com/groups/global/AllUsers` |
|
|
| Admin policy ARN | `arn:aws:iam::aws:policy/AdministratorAccess` |
|
|
|
|
## External References
|
|
|
|
- [AWS Penetration Testing Policy](https://aws.amazon.com/security/penetration-testing/)
|
|
- [ScoutSuite Documentation](https://github.com/nccgroup/ScoutSuite/wiki)
|
|
- [Pacu Wiki](https://github.com/RhinoSecurityLabs/pacu/wiki)
|
|
- [boto3 EC2 Reference](https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/ec2.html)
|