Home

Pacu

Pacu is an open source (BSD-3), modular enumeration and exploitation framework, designed for offensive security testing against AWS environments. Created and maintained by Rhino Security Labs, Pacu allows penetration testers to identify areas of attack once initial access is obtained to an AWS account. Currently, Pacu allows for privilege escalation exploitation, backdooring of AWS accounts, attacking vulnerable Lambda functions, and tampering with Cloudtrail logs, in additional to extensive enumeration and reconnaissance capabilities.

Navigating the Wiki

Getting Started

• The Quick Start Guide is intended to be a friendly introduction to using Pacu for the first time, with lots of screenshots and a few demonstrations of simple attack paths.
• The Installation page is a plain-written, easy-to-follow guide for installing Pacu and resolving installation-related issues.
• Detailed User Guide
• Session Logs and Other Output
• Glossary Data)
• Contributing to Pacu
  • Contribution Guidelines
  • Module Development Guide
• Warnings and Disclaimers
• FAQ