Skip to main content

aws-penetration-testing

Provides techniques for penetration testing AWS environments, covering IAM enumeration, privilege escalation, and security audits.

Install this skill

or
73/100

Security score

The aws-penetration-testing skill was audited on Mar 9, 2026 and we found 13 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 346

Curl to non-GitHub URL

SourceSKILL.md
346| Get metadata | `curl http://169.254.169.254/latest/meta-data/` |
low line 97

External URL reference

SourceSKILL.md
97http://169.254.169.254/latest/meta-data/
low line 100

External URL reference

SourceSKILL.md
100http://169.254.169.254/latest/meta-data/iam/security-credentials/
low line 103

External URL reference

SourceSKILL.md
103http://169.254.169.254/latest/meta-data/iam/security-credentials/ROLE-NAME
low line 119

External URL reference

SourceSKILL.md
119"http://169.254.169.254/latest/api/token")
low line 123

External URL reference

SourceSKILL.md
123"http://169.254.169.254/latest/meta-data/iam/security-credentials/"
low line 134

External URL reference

SourceSKILL.md
134http://169.254.170.2/v2/credentials/CREDENTIAL-PATH
low line 209

External URL reference

SourceSKILL.md
209https://{bucket-name}.s3.amazonaws.com
low line 210

External URL reference

SourceSKILL.md
210https://s3.amazonaws.com/{bucket-name}
low line 229

External URL reference

SourceSKILL.md
229https://buckets.grayhatwarfare.com/
low line 346

External URL reference

SourceSKILL.md
346| Get metadata | `curl http://169.254.169.254/latest/meta-data/` |
low line 375

External URL reference

SourceSKILL.md
375https://app.com/proxy?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/
low line 379

External URL reference

SourceSKILL.md
379https://app.com/proxy?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/AdminRole
Scanned on Mar 9, 2026
View Security Dashboard