☁️ Cloud Pentesting Checklist

☁️ Cloud Pentesting Tracker

Import

🗒️ Notes & Commands

🛠️ Common Cloud Pentesting Tools & Techniques

Cloud enumeration (AWS CLI, GCP SDK, Azure CLI)
IAM permissions & role misconfigurations
Public S3 bucket checks & data exfiltration
API abuse & credential leakage
Serverless function testing (AWS Lambda, Azure Functions)
Container & Kubernetes security
Infrastructure as Code (IaC) scanning
Misconfigured cloud storage
Privileged escalation in cloud environments
Cloud provider-specific exploits

☁️ Made with ❤️ by Captain Nemo

Powered by HackToLive