Cloud Penetration Testing

SUSPICIOUS. The skill is framed for authorized assessments, but it provides extensive offensive capability, including credential spraying, secret extraction, privilege escalation, backdoors, and persistence across cloud accounts. These actions pose high security risk despite the stated authorization requirements; the reviewed install paths do not independently indicate credential harvesting or confirmed malware.

This code fragment is not benign infrastructure automation; it is an offensive cloud pentesting toolkit that includes direct credential-access (password spraying with persistence of valid credentials), token acquisition (OAuth device-code and IMDS managed-identity token retrieval), and a tenant privilege-escalation workflow (Graph role assignment). It also performs broad sensitive configuration/data harvesting into local files. Even without obfuscation, its operational capabilities present a high security risk and strong misuse potential.