RhinoSecurityLabs/pacu

Features

• Penetration Testing - Provides a comprehensive framework for conducting security assessments and penetration testing within AWS environments.
• Cloud Privilege Escalation - Identifies and executes potential escalation paths by scanning for permission misconfigurations.
• Lateral Movement - Identifies network connections to map lateral movement opportunities across the VPC.
• Session State Persistence - Stores retrieved environment information in a local database to reduce API calls and track state across sessions.
• Local Metadata Persistence - Maintains a local database of discovered security metadata and session state to minimize API calls.
• AWS Resource-Type Enumeration Scanners - Enumerates AWS resource types by iterating through service APIs to map the overall environment footprint.
• Tool Integration Plug-ins - Offers a plugin-based module system allowing developers to create custom exploitation and enumeration tasks using a standardized syntax.
• ECS Resource Enumeration - Collects information on container clusters and parses their task definitions to map the attack surface.
• AWS IAM Management - Enumerates all users, roles, groups, and customer-managed policies using AWS IAM APIs.
• Persistence Mechanisms - Implements IAM user backdooring by adding unauthorized API keys or passwords to maintain long-term account persistence.
• Cloud Security Assessors - Modifies cloud settings to identify configuration flaws and security vulnerabilities.
• Cloud Resource Managers - Uses the Boto3 library to discover and control AWS virtual machines, storage, and network resources.
• Cross-Region Orchestration - Iterates through cloud service endpoints across all available geographic regions using a central session manager.
• Permission Enumerators - Searches enumerated permissions to find specific actions allowed on specific resources.
• Bucket Data Exfiltration - Scans for accessible S3 buckets and downloads all contained files to a local directory.
• Cloud Identity Enumerations - Identifies existing roles in remote accounts by analyzing responses to policy document update attempts.
• Identity Backdoor Automation - Deploys functions and rules to automatically backdoor newly created roles or users.
• Data Exfiltration Tools - Exfiltrates RDS data by creating snapshots of running databases and restoring them to new instances for access.
• Cloud Service Data Exfiltration - Identifies and downloads sensitive data from S3 buckets, RDS snapshots, DynamoDB tables, and Secrets Manager.
• Exploit Execution Engines - Executes specialized plugins to perform enumeration and data exfiltration against targeted cloud accounts.
• Exploitation Frameworks - Serves as a platform for the development, testing, and execution of security exploits specifically for AWS.
• Infrastructure Enumeration - Performs active infrastructure reconnaissance by collecting data on EC2 instances, security groups, and networks.
• Permission Auditing Tools - Uses APIs to generate a confirmed list of permissions for users and roles.
• Post-Exploitation Frameworks - Provides tools for managing access, maintaining persistence, and gathering data after an initial AWS account compromise.
• IAM Policy Analyzers - Analyzes IAM policy evaluation paths to detect unintended permission chains and privilege escalation risks.
• Cloud IAM Privilege Escalations - Scans for IAM misconfigurations and executes paths to increase access levels within an AWS environment.
• Red Teaming Frameworks - Provides a toolkit of primitives for offensive security operations, adversary simulation, and persistence in AWS.
• AWS Role Assumption - Establishes trust relationships between users and roles to allow unauthorized assumption of cloud identities.
• AWS - Performs automated security checks of AWS resource settings and access controls to identify security gaps.
• Penetration Testing Suites - Provides a suite of tools to automate security research and penetration testing tasks across cloud infrastructures.
• Session Isolations - Isolates target-specific authentication keys and data into separate containers to manage multiple accounts.
• Plugin-Based Architectures - Implements a plugin-based architecture to extend exploitation and enumeration capabilities via standalone scripts.
• Downloads from Snapshots - Downloads specific EBS snapshots to a local machine for mounting and forensic exploration.
• Snapshot Listings - Searches for EBS snapshots across multiple regions using keywords, account IDs, or wordlists.
• Encryption Auditing - Lists database snapshots and identifies those that are unencrypted for security auditing.
• Instance Attachments - Restores snapshots to volumes and attaches them to EC2 instances for detailed analysis.
• Table Data Export - Enumerates DynamoDB tables and exports their values to local files for offline review.
• Cloud Startup Script Injections - Injects custom shell scripts into instance startup data to run commands as root during reboot.
• Enumeration - Enumerates available routes and methods to map existing API gateway infrastructure.
• Template Data Extraction - Downloads templates and parameters from stacks to search for secrets.
• Template Resource Injection - Injects administrative roles into templates via bucket notifications to gain access.
• Cloud Organization Mapping - Enumerates organization entities and generates a visual tree of organizational units and accounts.
• Security Group Backdoor Automation - Deploys functions and rules to automatically add rules to new security groups.
• EKS Resource Enumeration - Lists and gathers information on managed Kubernetes cluster resources to map the attack surface.
• IAM Policy Auditors - Analyzes IAM policies to discover valid users in remote accounts through targeted API interactions.
• Enumeration - Enumerates and describes available message brokers to identify communication channels.
• Zone Management - Lists hosted DNS zones and correlates them with query logging configurations.
• Enumeration - Enumerates SFTP, FTP, and FTPS servers to identify available file transfer entry points.
• Cloud Database Enumerations - Lists RDS database instances including master usernames, engines, ports, and endpoints.
• Cloud Misconfiguration Discovery - Identifies EC2 instances that lack termination protection, exposing them to accidental or malicious deletion.
• Cloud Security Account Mapping - Identifies master and linked security accounts to uncover lateral movement opportunities.
• Container Image Backdoors - Injects malicious shell scripts into containers by modifying Docker images within task definitions.
• Application Identity Management - Manages the lifecycle of active credentials by creating, swapping, and verifying identity permissions.
• Cloud - Lists users, user pool clients, and identity pools within AWS Cognito.
• Instance Metadata Extraction - Downloads the user data associated with specific instances or launch templates.
• Cloud Identity Pool Exploits - Exploits AWS Cognito user and identity pool misconfigurations to escalate privileges.
• Credential Metadata Retrieval - Retrieves identity details, user names, and associated permissions for the current active credentials.
• CSV Formula Injections - Creates malicious resource identifiers that trigger formula execution when log exports are opened in spreadsheets.
• Permission Brute Forcing - Identifies available permissions by attempting all possible API calls for supported services.
• Security Group Backdooring - Adds ingress rules to security groups to allow access from a specific IP.
• Secrets Extraction - Provides the ability to extract and decrypt parameters from the AWS Systems Manager Parameter Store across all regions.
• Secrets Management - Enumerates and extracts secrets from the secrets manager and parameter store.
• Finding Aggregators - Retrieves and aggregates security findings from threat detectors across the account.
• Security Service Disruptions - Disables or deletes logging trails, security detectors, and flow logs to bypass detection.
• Serverless Function Enumeration - Collects data on Lambda functions, including source code and policies, to identify misconfigurations.
• Vulnerability Report Generation - Captures vulnerability findings from security inspector reports across supported regions.
• Monitoring Service Discovery - Detects the presence of logging and monitoring services to evaluate the environment's visibility.
• Remote Command Execution - Runs arbitrary commands with root or system privileges on virtual machines using remote command execution tools.
• Cloud Security Tooling and Automation - AWS exploitation and penetration testing framework.
• Cloud Infrastructure Security - Exploitation framework for testing AWS environment security.
• Cloud Security - Exploitation framework for testing AWS security.
• Cloud Security Auditing - Offensive security framework for testing AWS environments.
• Offensive Security Tools - Comprehensive toolkit for AWS penetration testing.

स्टार हिस्ट्री