Home

Pacu

Pacu is an open source, modular AWS exploitation framework, designed for offensive security testing against AWS cloud environments. Created and maintained by Rhino Security Labs, Pacu allows penetration testers to exploit configuration flaws within an AWS account. Current modules include capabilities for privilege escalation, backdooring of IAM users, code execution on EC2 instances, attacking vulnerable Lambda functions, and much more.

Navigating the Wiki

Getting Started

This is where you want to go if you're looking for more information on how to use Pacu

• The Quick Start Guide is intended to be a friendly introduction to using Pacu for the first time, with lots of screenshots and a few demonstrations of simple attack paths.
• The Installation page is a plain-written, easy-to-follow guide for installing Pacu and resolving installation-related issues.
• Detailed User Guide
• Session Logs and Other Output
• Glossary

Contributing to Pacu

• Contribution Guidelines
• Module Development Guide
• Warnings and Disclaimers
• FAQ