Cloud Penetration Testing

原文涵盖的主题

• Cloud Penetration Testing
• Purpose
• Prerequisites
• Required Tools
• Required Knowledge
• Required Access
• Outputs and Deliverables
• Core Workflow

Conduct comprehensive security assessments of cloud infrastructure across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill covers reconnaissance, authentication testing, resource enumeration, privilege escalation, data extraction, and persistence techniques for authorized cloud security engagements. Cloud architecture fundamentals Identity and Access Management (IAM) API authentication mechanisms DevOps and automation concepts Written authorization for testing Test credentials or access tokens Defined scope and rules of engagement 1. Cloud Security Assessment Report - Comprehensive findings and risk ratings 2. Resource Inventory - Enumerated services, storage, and compute instances 3. Credential Findings - Exposed secrets, keys, and misconfigurations 4. Remediation Recommendations - Hardening guidance per platform Gather initial information about target cloud presence: Authenticate to Azure environments: Discover Azure resources and permissions: Exploit Azure misconfigurations: Establish persistence in Azure: Authenticate to AWS environments: Discover AWS resources: Exploit AWS misconfigurations: Establish persistence in AWS: Discover GCP reso

这里只展示节选，请以完整原文和当前要求为准。