Packages and Binaries:
pacu
This package contains an open-source AWS exploitation framework, designed for offensive security testing against cloud environments. Created and maintained by Rhino Security Labs, Pacu allows penetration testers to exploit configuration flaws within an AWS account, using modules to easily expand its functionality. Current modules enable a range of attacks, including user privilege escalation, backdooring of IAM users, attacking vulnerable Lambda functions, and much more.
Installed size: 13.08 MB
How to install: sudo apt install pacu
Dependencies:
- awscli
- python3
- python3-boto3
- python3-botocore
- python3-dsnap
- python3-freezegun
- python3-requests
- python3-sqlalchemy
- python3-sqlalchemy-utils
- python3-typing-extensions
- python3-urllib3
pacu
root@kali:~# pacu -h
usage: pacu [-h] [--session] [--activate-session] [--new-session] [--set-keys]
[--module-name] [--data] [--module-args] [--list-modules]
[--pacu-help] [--module-info] [--exec] [--set-regions [...]]
[--whoami]
options:
-h, --help show this help message and exit
--session <session name>
--activate-session activate session, use session arg to set session name
--new-session <session name>
--set-keys alias, access id, secrect key, token
--module-name <module name>
--data <service name/all>
--module-args <--module-args='--regions us-east-1,us-east-1'>
--list-modules List arguments
--pacu-help List the Pacu help window
--module-info Get information on a specific module, use --module-
name
--exec exec module
--set-regions [ ...]
<region1 region2 ...> or <all> for all
--whoami Display information on current IAM user
Updated on: 2023-Aug-14