About

Imported from mukul975/anthropic-cybersecurity-skills (skills/performing-gcp-penetration-testing-with-gcpbucketbrute/SKILL.md). Install upstream with npx skills add mukul975/anthropic-cybersecurity-skills --skill performing-gcp-penetration-testing-with-gcpbucketbrute. Copyright stays with the author (Apache-2.0).

Performing GCP Penetration Testing with GCPBucketBrute

Name: performing-gcp-penetration-testing-with-gcpbucketbrute
Author: mukul975

Overview

This skill covers Google Cloud Platform security testing using GCPBucketBrute for storage bucket enumeration and access permission testing, combined with gcloud CLI IAM enumeration to identify privilege escalation paths. The approach tests for publicly accessible buckets, overly permissive IAM bindings, and service account key exposure.

When to Use

When conducting security assessments that involve performing gcp penetration testing with gcpbucketbrute
When following incident response procedures for related security events
When performing scheduled security testing or auditing activities
When validating security controls through hands-on testing

Prerequisites

Python 3.8+ with google-cloud-storage library
GCPBucketBrute installed from RhinoSecurityLabs GitHub
gcloud CLI authenticated with test credentials
Authorized penetration testing scope for target GCP project
google-api-python-client and google-auth libraries

Steps

Enumerate Storage Buckets — Use GCPBucketBrute with keyword permutations to discover accessible GCP storage buckets
Test Bucket Permissions — Call TestIamPermissions API on each discovered bucket to determine read/write/admin access levels
Audit IAM Bindings — Enumerate project-level IAM policies to identify overly permissive role bindings
Check Service Account Keys — Identify service accounts with user-managed keys and test for privilege escalation via impersonation
Test Privilege Escalation Paths — Check for iam.serviceAccounts.actAs, setIamPolicy, and other privilege escalation vectors
Generate Findings Report — Produce a structured security assessment with risk severity ratings

Expected Output

JSON report of discovered buckets with permission levels
IAM privilege escalation path analysis
Service account security assessment
Risk-scored findings with remediation recommendations

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/mukul975-anthropic-cybersecurity-skills-performing-gcp-p-d81d24/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

mukul975-anthropic-cybersecurity-skills-performing-gcp-p-d81d24.ocm.jsonjson

{
  "ocm": "1",
  "id": "mukul975-anthropic-cybersecurity-skills-performing-gcp-p-d81d24",
  "kind": "skill",
  "name": "performing-gcp-penetration-testing-with-gcpbucketbrute",
  "description": "Performs authorized GCP security testing using GCPBucketBrute to enumerate publicly accessible storage buckets, combined with gcloud CLI IAM enumeration to find privilege escalation paths and audit service account permissions. Use when penetration testing a GCP project for exposed buckets, overly permissive IAM bindings, or service account key exposure.",
  "publisher": "mukul975",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "general"
    ],
    "tags": [
      "skill-md",
      "gcp",
      "cloud-pentesting",
      "bucket-enumeration",
      "iam-audit",
      "privilege-escalation",
      "gcpbucketbrute",
      "skills-sh"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Performs authorized GCP security testing using GCPBucketBrute to enumerate publicly accessible storage buckets, combined with gcloud CLI IAM enumeration to find privilege escalation paths and audit service account permissions. Use when penetration testing a GCP project for exposed buckets, overly permissive IAM bindings, or service account key exposure."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "skills.sh",
      "repository": "https://github.com/mukul975/anthropic-cybersecurity-skills",
      "path": "skills/performing-gcp-penetration-testing-with-gcpbucketbrute/SKILL.md",
      "ref": "HEAD",
      "url": "https://github.com/mukul975/anthropic-cybersecurity-skills/blob/HEAD/skills/performing-gcp-penetration-testing-with-gcpbucketbrute/SKILL.md",
      "key": "mukul975/anthropic-cybersecurity-skills/skills/performing-gcp-penetration-testing-with-gcpbucketbrute/SKILL.md"
    },
    "license": "Apache-2.0"
  },
  "instructions": "# Performing GCP Penetration Testing with GCPBucketBrute\n\n## Overview\n\nThis skill covers Google Cloud Platform security testing using GCPBucketBrute for storage bucket enumeration and access permission testing, combined with gcloud CLI IAM enumeration to identify privilege escalation paths. The approach tests for publicly accessible buckets, overly permissive IAM bindings, and service account key exposure.\n\n\n## When to Use\n\n- When conducting security assessments that involve performing gcp penetration testing with gcpbucketbrute\n- When following incident response procedures for related securit",
  "cost": {
    "context_tokens": 496
  }
}

Fetch it by URL: GET /api/v1/registry/mukul975-anthropic-cybersecurity-skills-performing-gcp-p-d81d24/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.