Skip to content
Get packs

Cloud Attack Methods

Gives an agent offensive cloud pentest playbooks: metadata abuse, IAM privilege escalation, K8s, MinIO and Aliyun FC.

Source Download skill
Repository
AIPentest/CyberStrikeAI
Stars
8,323
Licence
Apache-2.0
Files
1 file

What it does

This skill is a dense cheat sheet, written mostly in Chinese, that teaches an AI agent specific offensive techniques against cloud environments. It covers stealing credentials from cloud metadata services, escalating privileges through AWS, Azure/Entra and GCP identity misconfigurations, attacking Kubernetes clusters, exploiting MinIO object storage (including listed CVEs), enumerating Alibaba Cloud Function Compute endpoints, and decrypting ChengZi SDK responses. When triggered, the agent uses these methods to plan and carry out attacks rather than defend against them.

Great for

  • Authorised penetration testers and red teams testing cloud environments they are contracted to assess
  • Security students working in lab ranges to learn cloud attack paths
  • Bug bounty hunters working within a program's published scope

Skip it if

  • Anyone targeting systems they do not own or have written permission to test, since the content is a direct attack playbook and misuse is illegal
  • Defenders looking for hardening guidance, because the file explains attacks rather than mitigations
  • Beginners expecting step-by-step tutorials, since the text is terse notes that assume existing expertise

Try asking

  • “Given credentials from a web app SSRF, show which AWS IAM privilege escalation paths to check in an authorised test”
  • “Enumerate a MinIO deployment on my test range and check for anonymous bucket read or write access”
  • “Check whether this Kubernetes pod's service account can read secrets via RBAC, within my approved scope”
  • “Identify whether a fcapp.run function URL is Aliyun Function Compute and list the behaviours that reveal it”
Step-by-step guide: how to use Cloud Attack MethodsInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the Apache-2.0 licence and an attribution note.

    cloud-attack-methods.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip cloud-attack-methods.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip cloud-attack-methods.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only use this skill with written authorisation and a defined scope, and state that scope in your request so the agent stays within it
  • Treat the output as a checklist of hypotheses to verify, since the notes reference specific CVEs and vendor behaviours that may be patched or outdated
  • Pair it with the tools it names in a lab environment first to confirm the steps work as described

What's inside

  • SKILL.md

Redistributed unmodified from AIPentest/CyberStrikeAI under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.