Cloud Misconfiguration Testing
When Invoked
The user runs /vapt cloud <url> for cloud infrastructure security testing.
Detects cloud provider (AWS, Azure, GCP) and tests for common misconfigurations exposed to the public internet.
Phase 1: Cloud Provider Detection
1.1 Infrastructure Fingerprinting
# Check response headers for cloud indicators
curl -sI <url> | grep -iE 'x-amz|x-goog|x-ms|x-azure|server.*amazon|server.*google|server.*microsoft'
# Check IP ranges
dig +s
[Description truncada. Veja o README completo no GitHub.]