skill

offensive-cloud

Cloud security attack methodology covering AWS, Azure, and GCP. Includes credential harvesting (IMDS, ~/.aws, env vars, leaked CI secrets, instance roles), enumeration with cloud-specific tools (pacu, ScoutSuite, Prowler, ROADtools, gcp_enum), privilege escalation paths (IAM PassRole, AssumeRole chains, Lambda/Functions privilege flips, Azure Owner-on-self, GCP serviceAccountTokenCreator), persistence techniques (IAM user/key creation, AAD app registration, GCP svc account key creation, EventBridge/Logic Apps backdoors), data exfiltration (S3/Blob/GCS, snapshot share, RDS/CosmosDB/Cloud SQL exfil), cloud-native lateral movement (cross-account assume, Azure AD multi-tenant, GCP project hierarchy), serverless attacks (Lambda env vars, layer hijack, Step Functions), Kubernetes-on-cloud (EKS/AKS/GKE-specific paths to node and AWS metadata), and CSPM evasion (CloudTrail blind spots, GuardDuty mute, Sentinel rule shaping). Use when the engagement scope is cloud accounts, when you've stolen cloud credentials, or when assessing cloud posture.

Description as published by the maintainer. Source

• slowing

slowing — Most recent push to the repository was 2026-05-08.

Signals

These are separate measurements of different things. They are deliberately not combined into one score, because a popularity number that mixes website traffic with saves and stars cannot be checked or acted on.

Will this work with your setup?

Install location suggests this is meant for claude-code. The author tagged this repository "claude-skills" on GitHub. That is their statement of intent, not a test result.

We have not run this skill against a task with and without it enabled, so we cannot tell you whether it improves anything, what it costs in tokens, or whether it duplicates behaviour your harness already has. When we have run that test, the result will appear on this page with the task, the versions and the budget it used.

The skill definition lives at Skills/cloud/offensive-cloud/SKILL.md in https://github.com/SnailSploit/Claude-Red.

Where to get it

• Repository — https://github.com/SnailSploit/Claude-Red

Also from snailsploit

• snailsploit-claude-red-offensive-active-directory — last commit 2026-05-08
  Active Directory attack methodology for internal network red team engagements. Covers reconnaissance (BloodHound, Power…
• snailsploit-claude-red-offensive-business-logic — last commit 2026-05-08
  Business logic vulnerability testing for web/mobile/API engagements. Covers workflow bypass, state machine violations,…
• snailsploit-claude-red-offensive-fuzzing — last commit 2026-05-08
  Practical offensive fuzzing methodology covering target identification, fuzzer selection (AFL++, libFuzzer, Honggfuzz,…
• snailsploit-claude-red-offensive-iot — last commit 2026-05-08
  IoT and embedded device security testing methodology. Covers hardware reconnaissance (UART, JTAG, SWD, SPI flash, I2C E…
• snailsploit-claude-red-offensive-jwt — last commit 2026-05-08
  JWT attack methodology for penetration testers. Covers algorithm confusion (alg:none, RS256→HS256), weak HMAC secret br…
• snailsploit-claude-red-offensive-mobile — last commit 2026-05-08
  Mobile (Android + iOS) application penetration testing methodology. Covers static analysis (apktool/jadx for Android, c…
• snailsploit-claude-red-offensive-osint — last commit 2026-05-08
  Comprehensive OSINT methodology skill for offensive security, red team intelligence gathering, and bug bounty reconnais…
• snailsploit-claude-red-offensive-reporting — last commit 2026-05-08
  Penetration test and red team report writing methodology. Covers executive summary structuring (risk-led narrative for…
• snailsploit-claude-red-offensive-shellcode — last commit 2026-05-08
  Shellcode development reference for offensive security engagements. Use when writing custom x86/x64 shellcode, implemen…
• snailsploit-claude-red-offensive-toctou — last commit 2026-05-08
  Time-of-Check / Time-of-Use (TOCTOU) race condition exploitation methodology across binary, kernel, filesystem, web, an…