Pacu is an AWS exploitation framework designed for offensive security testing and penetration testing of Amazon Web Services environments.
Pacu addresses the need to identify and exploit configuration weaknesses in AWS deployments. It operates as a modular framework where penetration testers can run individual attack modules against target AWS accounts. The tool stores session data including AWS credentials and results from module executions, allowing testers to maintain multiple independent testing sessions and resume work across restarts. Modules cover a range of attack vectors including user privilege escalation, IAM user backdooring, and exploitation of vulnerable Lambda functions.
Pacu is suited for security professionals conducting authorized penetration tests against AWS infrastructure. It works best for testers who have obtained legitimate AWS credentials with minimal permissions and need to systematically explore what those credentials can access or escalate to. The framework's modular design means new attack capabilities can be added as modules, making it extensible for emerging AWS security concerns. Installation is straightforward, requiring only Python 3.7 or later and pip, with Docker support available for isolated execution. The tool supports region-specific testing, allowing modules to run against particular AWS regions or multiple regions simultaneously.
The project maintains active community engagement through a dedicated Discord server and accepts issue reports on GitHub. Development shows consistent attention to usability, with comprehensive documentation in the project wiki covering installation and usage. The framework receives updates that may precede official releases, indicating ongoing refinement of existing modules and addition of new attack capabilities.
