Cloud Iam Deep
by elementalsouls · security · rust, go, bash, sql, skill
Cloud IAM red-team attack chain across AWS, Azure, GCP — focused on EXTERNAL exploitation paths and post-credential-discovery privilege analysis. Covers IAM enumeration (aws iam, az role, gcloud iam), STS/AssumeRole chaining, Azure Managed Identity abuse (via SSRF/leak), GCP service account JSON abuse, IMDSv1/v2 attacks via SSRF, K8s ServiceAccount token exfil, role-trust-policy confused-deputy, cross-account assume-role enumeration, IAM privilege escalation patterns (24+ AWS, 8+ Azure, 6+ GC...
Source: https://github.com/elementalsouls/Claude-BugHunter
Install
git clone https://github.com/elementalsouls/Claude-BugHunterTags: rust, go, bash, sql, skill
⭐ 1,010 GitHub stars · Source: skillsdirectory
About security MCP servers and Claude skills
Security MCP servers let agents scan dependencies, audit logs, check for vulnerabilities, and enforce policy guardrails. Critical for any agent that touches production.
Cloud Iam Deep is one of hundreds of security entries indexed on Skiln. Browse the full security category or the complete directory of Claude skills, MCP servers, agents, commands, and hooks.
Related security MCPs and skills
- Auditing Azure Active Directory Configuration by mukul975
'Auditing Microsoft Entra ID (Azure Active Directory) configuration to identify risky authentication policies,
- Auditing Gcp Iam Permissions by mukul975
'Auditing Google Cloud Platform IAM permissions to identify overly permissive bindings, primitive role usage,
- Auditing Terraform Infrastructure For Security by mukul975
'Auditing Terraform infrastructure-as-code for security misconfigurations using Checkov, tfsec, Terrascan, and
- Auditing Tls Certificate Transparency Logs by mukul975
'Monitors Certificate Transparency (CT) logs to detect unauthorized certificate issuance, discover subdomains
- Automating Ioc Enrichment by mukul975
'Automates the enrichment of raw indicators of compromise with multi-source threat intelligence context using
- Building Attack Pattern Library From Cti Reports by mukul975
Extract and catalog attack patterns from cyber threat intelligence reports into a structured STIX-based library
- Bittensor Taostats by jiayaoqijia
**Purpose**: Interact with TaoStats API for Bittensor blockchain data - subnets, validators, miners, staking, emissions, and more. **API Documentation**: https://docs.taostats.io/ **Base URL**: `https://api.taostats.io` **Rate Limit**: 5 calls/minute (free tier) ---
- Building Identity Federation With Saml Azure Ad by mukul975
Establish SAML 2.0 identity federation between on-premises Active Directory and Azure AD (Microsoft Entra ID)
Frequently asked questions
How do I install Cloud Iam Deep?
Add the install command above to your Claude Code, Cursor, or Windsurf MCP configuration. Most servers register via npx, a local command, or a Docker image. Refer to the source repository for environment variables and credential requirements.
Which clients support Cloud Iam Deep?
Any MCP-compatible client works: Claude Desktop, Claude Code CLI, Cursor, Windsurf, Zed, and VS Code with the official MCP extension. OpenAI Codex and GitHub Copilot increasingly support MCP via adapter bridges.
Is Cloud Iam Deep free?
The server itself is typically open source. Any upstream service (API keys, paid tiers, hosted infrastructure) may have its own pricing. Check the source repository for details.