domains / families / security / exploiting-aws-with-pacu

exploiting-aws-with-pacu

separate

Runs the Pacu AWS exploitation framework end-to-end — session and credential setup, IAM enumeration, automated privilege-escalation scanning via iam__privesc_scan, and persistence/backdooring modules like iam__backdoor_users_keys. Use for authorized AWS penetration tests or red-team engagements, assessing blast radius from a compromised IAM credential, or generating attacker telemetry for purple-team detection testing.

When to use

• Conducting an authorized AWS cloud penetration test or red-team engagement
• Assessing the blast radius of a single compromised IAM credential (privesc scanning)
• Demonstrating persistence/backdoor techniques to drive remediation
• Generating realistic attacker telemetry to test cloud detections (purple team)
• Mapping an unfamiliar AWS account's IAM, EC2, S3, and Lambda exposure

When not to use

• unauthorized use
• testing accounts without explicit written authorization

Skill page

Source