PACU

Pacu is an open-source Python exploitation framework for AWS cloud environments. It can be used for reconnaissance, privilege escalation, lateral movement, exploitation, and evasion in the cloud. Pacu uses modules to do things like

Enumerate users, roles, resources, lambda data, and s3 buckets
Identify privilege paths and misconfigurations
Perform injection
Gain persistence within the cloud

Usage

Change to the pacu directory and create a new session
Import some keys we found in an internal repository
Run the aws__enum_account module to verify the keys are working
Find out current permissions by populating the database with the iam__enum_permissions command
Run the iam__privesc_scan module for additional checks
Choose from the attack options Pacu has confirmed exist, or the potential attacks it listed for privesc
Enumerate other users and policies to determine what access they have, with iam__enum_users_roles_policies_groups –users
Use the data command to query information about services, configurations, and more from the Pacu database
Leverage the access to move into the compute resources
…