skillrank_skill ▸ wgpsec/cloud-aksk-exploitMIT · open registry

skill detail

← registry

Cloud Aksk Exploit

wgpsec/cloud-aksk-exploit

云凭据(AK/SK)泄露后的完整利用链。当通过信息泄露/.env文件/git泄露/SSRF元数据获取到云平台 Access Key 和 Secret Key 后使用。当获取到 AWS AKIA*/ASIA*、腾讯云 AKIDz*、阿里云 LTAI* 等凭据格式时使用。覆盖凭据配置→权限枚举→资源接管→后门持久化的完整攻击链。与 cloud-iam-audit（侧重策略分析）互补——本 skill 侧重拿到凭据后的实战利用动作。腾讯云比赛场景的 CAM/COS/CVM/SCF 利用是重点。发现任何云 API 密钥、临时凭据、或 STS Token...

communityprovisionaldevopsenvgitssrf

skillrank score

███████░░░░░░░░░43

SkillRank score blends community stars, real usage, and our eval lift; provisional until a skill is evaluated -- so popularity alone can't reach the top tier.

source

★ 1.6k

wgpsec/AboutSecurity

skills/cloud/cloud-aksk-exploit

open on GitHub ▸

eval status

eval pending

Success delta, token delta, and trial count are not available yet. No eval number is shown until this skill has measured results.

install

$ skillrank install wgpsec/cloud-aksk-exploit
$ curl -fsSL skillrank.dev | sh