# Pacu AWS Exploitation Framework

## Github repo: <https://github.com/RhinoSecurityLabs/pacu>

### Import AWS keys for a specific profile

```
import_keys PROFILE_NAME

set_keys (Insert valid Access Key and Secret Access Key to gain a session)
```

### Detect if keys are honey token keys

```
run iam__detect_honeytokens
```

### Enumerate account information and permissions

```
run iam__enum_users_roles_policies_groups

run iam__enum_permissions

run iam__enum_users --role-name ROLE_NAME --account-id AWS_ACCOUNT_ID (Enumerate IAM Users)

run iam__enum_roles --role-name ROLE_NAME --account-id AWS_ACCOUNT_ID (Enumerate IAM Roles and possibly assume a role we may find)

run iam__bruteforce_permissions (Bruteforce IAM permissions)

whoami
```

### Check for privilege escalation

```
run iam__privesc_scan
```
