skillrank_skill wgpsec/aliyun-pentestingMIT · open registry

skill detail

← registry

Aliyun Pentesting

wgpsec/aliyun-pentesting

阿里云渗透测试方法论。当目标使用阿里云服务、发现 oss-*.aliyuncs.com 资产、获取阿里云 AccessKey(LTAI 开头)、在 ECS 实例内部可访问 100.100.100.200 元数据、或需要对阿里云 RAM/ECS/OSS/RDS/ACK/FC 等服务进行安全评估时使用。覆盖 RAM 提权、ECS 接管、OSS Bucket 利用、RDS 数据库攻击、ACK 容器集群、FC 函数计算、SLB 负载均衡、日志服务、KMS 密钥管理

communityprovisionalotherossaliyuncs.comaccesskey

skillrank score

███████░░░░░░░░░43

SkillRank score blends community stars, real usage, and our eval lift; provisional until a skill is evaluated -- so popularity alone can't reach the top tier.

source

1.6k

wgpsec/AboutSecurity

skills/cloud/aliyun-pentesting

open on GitHub ▸

eval status

eval pending

Success delta, token delta, and trial count are not available yet. No eval number is shown until this skill has measured results.

install

$ skillrank install wgpsec/aliyun-pentesting
$ curl -fsSL skillrank.dev | sh