Pacu

No entries match these filters. Clear filters

1. v1.6.1 Jul 24, 2025 · release notes

   Pacu v1.6.1 adds EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves. token extraction, directory services enum, Elastic Beanstalk enum, MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. support, and new shell UX commands.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.6.1 https://github.com/RhinoSecurityLabs/pacu.git
   # already have the repo? check out this version:
   $ git checkout v1.6.1

   └──▷ TRY IT
   Review your session's command history to audit or repeat previous enumeration steps.
   copy

   $ history

   • Adds use as an alias for the run/exec commands for quicker module invocation.
   • Adds -h flag to run/exec to display per-module help inline.
   • New history command to review previously executed Pacu commands in a session.
   • New debug command to view the Pacu error log without leaving the shell.
   • New command to delete stored AWS keys from a Pacu session.

   +7 more show less

   • Adds MFA support to assume_role, enabling role assumption with MFA-protected principals.
   • New eks__enum_pod_tokens module to extract service account tokens from running pods in EKS clusters.
   • New ds__enum (directory services enumeration) module for AWS Directory Service reconnaissance.
   • New elasticbeanstalk__enum module to enumerate Elastic Beanstalk environments and configurations.
   • Updates iam__bruteforce_permissions to check all AWS services, expanding permission coverage.
   • Updates secrets_enum to list all found secrets after enumeration.
   • Updates iam__enum_permissions module with expanded permission enumeration capabilities.

   12 details in Everything

2. v1.6.0 May 28, 2024 · release notes

   Pacu v1.6.0 adds mq__enum, SNSSNSAmazon Simple Notification Service, a managed pub/sub messaging service from AWS that lets tools fan out alerts or events to multiple subscribers — queues, email, HTTP endpoints, or Lambda functions — without managing broker infrastructure. module, quiet flag, and DB reset requirement

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.6.0 https://github.com/RhinoSecurityLabs/pacu.git
   # already have the repo? check out this version:
   $ git checkout v1.6.0

   • Adds new mq__enum module for enumerating Message Queue resources
   • Adds new SNS topic subscription via email and SNS enum modules (sns__enum, sns__topic_subscription_email)
   • Adds --quiet flag to suppress non-essential output
   • Enhances iam__enum_permissions with unconfirmed permission counts in output

   4 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Requires re-initialization: run rm ~/.local/share/pacu/sqlite.db to avoid errors with previous database versions.
3. v1.5.1 Jan 9, 2024 · release notes

   Pacu v1.5.1 adds an akid module and decoder for extracting keys from access identifiers.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.5.1 https://github.com/RhinoSecurityLabs/pacu.git
   # already have the repo? check out this version:
   $ git checkout v1.5.1

   └──▷ USE IT
   Extract Access Key IDs from input text using the new akid module command.
   shell copy

   run akid -i "AKIA…"

4. v1.4.2 Oct 26, 2023 · release notes

   Adds ebs__enum_snapshots_unauth module for unauthenticated EBSEBSAmazon's block-storage service for EC2 instances, providing persistent network-attached volumes that survive instance restarts and can be snapshotted, giving cyber tools durable, scalable disk without managing physical drives. snapshot reconnaissance

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.4.2 https://github.com/RhinoSecurityLabs/pacu.git
   # already have the repo? check out this version:
   $ git checkout v1.4.2

   └──▷ TRY IT
   Run the new unauthenticated scan to identify exposed EBS snapshots without credentials.
   copy

   $ pacu run ebs__enum_snapshots_unauth

5. v1.4.0 Oct 9, 2023 · release notes

   Adds Cognito modules to expand AWS credential exploitation capabilities.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.4.0 https://github.com/RhinoSecurityLabs/pacu.git
   # already have the repo? check out this version:
   $ git checkout v1.4.0

   └──▷ USE IT
   Interact with AWS Cognito services to test authentication flows.
   shell copy

   python3 pacu.py --module cognito

   • Adds cognito module for interacting with AWS Cognito services

   1 detail in Everything

6. v1.3.1 Aug 7, 2023 · release notes

   Adds jq module and expands route53__enum detection scope in Pacu v1.3.1

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.3.1 https://github.com/RhinoSecurityLabs/pacu.git
   # already have the repo? check out this version:
   $ git checkout v1.3.1

   └──▷ USE IT
   Run the updated enumeration module to find more Route 53 resources.
   shell copy

   pacu > run route53__enum

   • Adds jq module to parse collected data using jq syntax
   • Expands route53__enum enumeration to discover additional AWS Route 53 resources

   2 details in Everything

7. v1.3.0 Jun 2, 2023 · release notes

   Pacu v1.3.0 adds organizations__assume_role module and --import-keys CLI flag

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.3.0 https://github.com/RhinoSecurityLabs/pacu.git
   # already have the repo? check out this version:
   $ git checkout v1.3.0

   └──▷ TRY IT
   Execute the new lateral move module to assume roles across organizational units
   copy

   $ pacu --module organizations__assume_role

   • Adds the organizations__assume_role lateral move module to perform role assumption across AWS Organizations boundaries
   • Adds the --import-keys CLI option to import credentials from a specified profile during a CLI run

   2 details in Everything

8. v1.2.1 Apr 28, 2023 · release notes

   Pacu v1.2.1 adds iam__enum_action_query module and privesc method info to iam__privesc_scan

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.2.1 https://github.com/RhinoSecurityLabs/pacu.git
   # already have the repo? check out this version:
   $ git checkout v1.2.1

   • Adds iam__enum_action_query module for enumerated permissions query by actions
   • Adds privesc method information output and method list feature to iam__privesc_scan

   2 details in Everything