This package contains an open-source AWS exploitation framework, designed for offensive security testing against cloud environments. Created and maintained by Rhino Security Labs, Pacu allows penetration testers to exploit configuration flaws within an AWS account, using modules to easily expand its functionality. Current modules enable a range of attacks, including user privilege escalation, backdooring of IAM users, attacking vulnerable Lambda functions, and much more.
sudo apt install pacu (13.33 MB)
Dependências: awscli, python3, python3-boto3, python3-botocore, python3-colorama, python3-dsnap, python3-freezegun, python3-jq, python3-policyuniverse, python3-pycognito, python3-qrcode, python3-requests, python3-sqlalchemy, python3-sqlalchemy-utils, python3-toml, python3-typing-extensions, python3-urllib3, python3-yaml
Escolha um comando ao lado para ver a descrição e a ajuda completa.
pacu
root@kali:~# pacu -h
usage: pacu [-h] [--session ] [--activate-session] [--new-session ]
[--set-keys ] [--import-keys ] [--module-name ] [--data ]
[--module-args ] [--list-modules] [--pacu-help] [--module-info]
[--exec] [--set-regions [ ...]] [--whoami] [--version] [-q]
options:
-h, --help show this help message and exit
--session <session name>
--activate-session activate session, use session arg to set session name
--new-session <session name>
--set-keys alias, access id, secret key, token
--import-keys AWS profile name to import keys from
--module-name <module name>
--data <service name/all>
--module-args <--module-args='--regions us-east-1,us-east-1'>
--list-modules List arguments
--pacu-help List the Pacu help window
--module-info Get information on a specific module, use --module-
name
--exec exec module
--set-regions [ ...]
<region1 region2 ...> or <all> for all
--whoami Display information on current IAM user
--version Display Pacu version
-q, --quiet Do not print the banner on startup