skills.rest
dreadnode
dreadnodeOFFICIAL
Explore all skills by this author →
Website𝕏@dreadnodeGitHub

pacu-aws-exploitation

Execute Pacu modules to enumerate IAM permissions during authorized AWS web security assessments.

11|1|Updated May 4, 2026
Search Tags:#aws#penetration testing#privilege escalation#cloud security#ssrf#pacu#credential validation
One-click install
npx skills add https://github.com/dreadnode/capabilities --skill pacu-aws-exploitation
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: pacu-aws-exploitation
Source: https://github.com/dreadnode/capabilities/tree/main/capabilities/web-security/skills/pacu-aws-exploitation
Command: npx skills add https://github.com/dreadnode/capabilities --skill pacu-aws-exploitation

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill solves the problem of validating concrete AWS account compromise impact during authorized web security assessments, when credentials or metadata access are obtained from web vulnerabilities such as SSRF, exposed access keys, or client-side configuration leaks.

Core Features & Use Cases

  • Authorized AWS Exploitation: Execute Pacu modules to test for IAM privilege escalation, S3 bucket access, Lambda exposure, and other AWS-specific vulnerabilities tied to a confirmed web finding.
  • Credential Validation: Verify the impact of temporary credentials from SSRF to EC2 instance metadata, exposed long-term access keys in source code or client bundles, or credentials provided for an explicit AWS assessment.
  • Evidence Generation: Tie AWS API results back to the original web vulnerability to prove concrete impact for security reports, including identifying the exact request that exposed credentials and the AWS permissions that were abused.
  • Use Case: If an SSRF vulnerability grants access to EC2 instance metadata, use this Skill to enumerate the associated IAM principal's permissions and confirm whether sensitive S3 buckets or Lambda functions are accessible.

Quick Start

Use the pacu-aws-exploitation skill to validate the impact of temporary AWS credentials obtained from a confirmed SSRF vulnerability in your authorized web test scope.

Frequently Asked Questions about pacu-aws-exploitation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate AWS compromise impact after finding exposed credentials?▼

To validate AWS compromise impact, you can use Pacu exploitation modules to enumerate IAM permissions, test for privilege escalation, and verify access to AWS resources using the exposed credentials.

Can I enumerate IAM permissions from temporary credentials obtained via SSRF?▼

Yes, you can enumerate IAM permissions from temporary credentials obtained via SSRF to EC2 instance metadata. The Skill executes Pacu modules to query associated IAM principal permissions and identify accessible resources.

What is the best way to prove concrete impact for an AWS account compromise in a security report?▼

The best way to prove concrete impact is to tie AWS API results back to the original web vulnerability, identifying the exact request that exposed credentials and the specific AWS permissions that were abused.

How do I test for AWS privilege escalation with leaked access keys?▼

You can test for AWS privilege escalation with leaked access keys by executing Pacu modules against the exposed credentials to enumerate permissions and identify potential escalation paths within the authorized assessment scope.

Does this Skill work for explicitly scoped AWS account security assessments?▼

Yes, this Skill works for explicitly scoped AWS account security assessments by executing Pacu exploitation modules to validate access to S3 buckets, Lambda functions, and other AWS resources tied to confirmed findings.

When should I not use Pacu for AWS exploitation during a web security assessment?▼

You should not use Pacu for AWS exploitation outside of authorized web security assessments. This Skill is strictly for validating compromise impact when credentials or metadata access are obtained from confirmed web vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
mreferremreferre

setting-up-ec2-instance-profiles

Create IAM roles and instance profiles for EC2 to access AWS services.

Community
Advanced
ArianHobson333ArianHobson333
7

aws-iam-enum

Enumerate AWS IAM policies and detect privilege escalation paths.

Community
Intermediate
lips85lips85

AWS Penetration Testing

Performs AWS penetration tests including privilege escalation and IAM enumeration using Pacu and Boto3.

Community
Advanced
cybersecwomancybersecwoman
5

cloud-iam-deep

Analyzes and validates IAM security configurations and credentials across AWS, Azure, and GCP.

Community
Advanced