Cloud

AWS CLI / Azure CLI / gcloud

Official cloud CLIs — primary interface for cloud assessments.

beginner

Linux

Windows

macOS

Enumeration

Post-Exploitation

Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.

Any cloud test; know the provider CLI before specialized tools.

Configure credentials; list resources; inspect IAM/policies carefully.

Everything else builds on native APIs exposed by these CLIs.

Commands & usage

aws sts get-caller-identity

aws s3 ls

az account show

gcloud projects list

Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.

Pacu

AWS exploitation framework for post-compromise cloud assessment.

Prowler

Cloud security best-practice assessment tool (AWS/Azure/GCP).

ScoutSuite

Multi-cloud security auditing tool producing HTML reports.

CloudMapper

Network visualization and analysis for AWS environments.

enumerate-iam

Enumerates permissions for AWS access keys by trying API calls.

S3Scanner / cloud_enum

Find open storage buckets and cloud assets by name mutation.