RhinoSecurityLabs/pacu

Health v2 · maintenance only

Adoption not part of the score

5312 stars · 797 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Pacu is an open-source AWS exploitation framework for offensive security testing of Amazon Web Services environments. It provides a modular, Metasploit-like CLI where penetration testers can enumerate, exploit configuration flaws, escalate IAM privileges, backdoor users, and attack Lambda functions using compromised AWS keys.

Use cases

• test the security of my AWS account with a simulated attacker
• find IAM privilege escalation paths in an AWS environment
• run an authenticated AWS penetration test
• enumerate AWS resources using compromised credentials
• backdoor IAM users and persist access during a red team engagement
• audit exploitable AWS configuration flaws beyond compliance scanning

When to choose

• you are a penetration tester or red teamer assessing an AWS environment
• you need exploit-focused AWS testing rather than compliance auditing
• you want a modular, extensible framework for cloud attack simulation

When to avoid

• you need a defensive compliance or misconfiguration scanner rather than an offensive tool
• you are testing clouds other than AWS
• you lack authorization to test the target AWS account

Facets

framework · maturity active

penetration-testing security cli security penetration-testing cloud-computing developer-tools windows python cli cross-platform aws aws-security offensive-security red-team exploitation-framework iam-privilege-escalation cloud-pentesting linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="RhinoSecurityLabs/pacu")