hunt-cloud-misconfig - Hunt Cloud and Infrastructure Misconfigurations
Hunt for cloud and infrastructure misconfigurations across storage, identity, exposed services, and telemetry configurations.
Tags
Updated: 2026-09-29Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Identify cloud misconfigurations
- Assess exposed administration panels
- Review IAM permission scope
- Analyze CloudWatch RUM configurations
- Verify findings in LocalStack
- Provide defensive guidance
Inputs
- Authorized target scope
- Written authorization
- Target URLs, IPs, or resources
- Cloud configuration or JavaScript files
- Relevant testing tools
Outputs
- Misconfiguration findings
- Severity assessments
- Defensive guidance
- Local verification results
Requirements
- Explicit written authorization
- Relevant testing tools
- Docker for LocalStack verification
- AWS CLI for local verification