https://cybertoolchain.io/tools/pacu New releases and features in Pacu, tracked by The Cyber Toolchain. en Thu, 24 Jul 2025 16:35:52 GMT https://github.com/RhinoSecurityLabs/pacu/releases/tag/v1.6.1 https://github.com/RhinoSecurityLabs/pacu/releases/tag/v1.6.1 Thu, 24 Jul 2025 16:35:52 GMT Pacu v1.6.1 adds EKS token extraction, directory services enum, Elastic Beanstalk enum, MFA support, and new shell UX commands. • Adds `use` as an alias for the `run`/`exec` commands for quicker module invocation. • Adds `-h` flag to `run`/`exec` to display per-module help inline. • New `history` command to review previously executed Pacu commands in a session. • New `debug` command to view the Pacu error log without leaving the shell. • New command to delete stored AWS keys from a Pacu session. • Adds MFA support to `assume_role`, enabling role assumption with MFA-protected principals. • New `eks__enum_pod_tokens` module to extract service account tokens from running pods in EKS clusters. • New `ds__enum` (directory services enumeration) module for AWS Directory Service reconnaissance. • New `elasticbeanstalk__enum` module to enumerate Elastic Beanstalk environments and configurations. • Updates `iam__bruteforce_permissions` to check all AWS services, expanding permission coverage. • Updates `secrets_enum` to list all found secrets after enumeration. • Updates `iam__enum_permissions` module with expanded permission enumeration capabilities. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pacu https://github.com/RhinoSecurityLabs/pacu/releases/tag/v1.6.0 https://github.com/RhinoSecurityLabs/pacu/releases/tag/v1.6.0 Tue, 28 May 2024 21:39:00 GMT Pacu v1.6.0 adds `mq__enum`, SNS module, quiet flag, and DB reset requirement • Adds new `mq__enum` module for enumerating Message Queue resources • Adds new SNS topic subscription via email and SNS enum modules (`sns__enum`, `sns__topic_subscription_email`) • Adds `--quiet` flag to suppress non-essential output • Enhances `iam__enum_permissions` with unconfirmed permission counts in output Breaking changes: • Requires re-initialization: run `rm ~/.local/share/pacu/sqlite.db` to avoid errors with previous database versions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pacu https://github.com/RhinoSecurityLabs/pacu/releases/tag/v1.5.1 https://github.com/RhinoSecurityLabs/pacu/releases/tag/v1.5.1 Tue, 09 Jan 2024 17:28:45 GMT Pacu v1.5.1 adds an `akid` module and decoder for extracting keys from access identifiers. • Adds the `akid` module with a built-in decoder to extract AWS Access Key IDs from provided strings Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pacu https://github.com/RhinoSecurityLabs/pacu/releases/tag/v1.4.2 https://github.com/RhinoSecurityLabs/pacu/releases/tag/v1.4.2 Thu, 26 Oct 2023 22:03:40 GMT Adds ebs__enum_snapshots_unauth module for unauthenticated EBS snapshot reconnaissance • Adds `ebs__enum_snapshots_unauth` module for Unauthenticated EBS Snapshot Reconnaissance Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pacu https://github.com/RhinoSecurityLabs/pacu/releases/tag/v1.4.0 https://github.com/RhinoSecurityLabs/pacu/releases/tag/v1.4.0 Mon, 09 Oct 2023 18:48:28 GMT Adds Cognito modules to expand AWS credential exploitation capabilities. • Adds `cognito` module for interacting with AWS Cognito services Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pacu https://github.com/RhinoSecurityLabs/pacu/releases/tag/v1.3.1 https://github.com/RhinoSecurityLabs/pacu/releases/tag/v1.3.1 Mon, 07 Aug 2023 22:11:34 GMT Adds `jq` module and expands route53__enum detection scope in Pacu v1.3.1 • Adds `jq` module to parse collected data using jq syntax • Expands route53__enum enumeration to discover additional AWS Route 53 resources Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pacu https://github.com/RhinoSecurityLabs/pacu/releases/tag/v1.3.0 https://github.com/RhinoSecurityLabs/pacu/releases/tag/v1.3.0 Fri, 02 Jun 2023 19:01:33 GMT Pacu v1.3.0 adds `organizations__assume_role` module and `--import-keys` CLI flag • Adds the `organizations__assume_role` lateral move module to perform role assumption across AWS Organizations boundaries • Adds the `--import-keys` CLI option to import credentials from a specified profile during a CLI run Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pacu https://github.com/RhinoSecurityLabs/pacu/releases/tag/v1.2.1 https://github.com/RhinoSecurityLabs/pacu/releases/tag/v1.2.1 Fri, 28 Apr 2023 18:11:07 GMT Pacu v1.2.1 adds iam__enum_action_query module and privesc method info to iam__privesc_scan • Adds `iam__enum_action_query` module for enumerated permissions query by actions • Adds `privesc` method information output and method list feature to `iam__privesc_scan` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pacu