pacu-aws-exploitation

What problem does it solve?

This Skill solves the problem of validating concrete AWS account compromise impact during authorized web security assessments, when credentials or metadata access are obtained from web vulnerabilities such as SSRF, exposed access keys, or client-side configuration leaks.

Core Features & Use Cases

• Authorized AWS Exploitation: Execute Pacu modules to test for IAM privilege escalation, S3 bucket access, Lambda exposure, and other AWS-specific vulnerabilities tied to a confirmed web finding.
• Credential Validation: Verify the impact of temporary credentials from SSRF to EC2 instance metadata, exposed long-term access keys in source code or client bundles, or credentials provided for an explicit AWS assessment.
• Evidence Generation: Tie AWS API results back to the original web vulnerability to prove concrete impact for security reports, including identifying the exact request that exposed credentials and the AWS permissions that were abused.
• Use Case: If an SSRF vulnerability grants access to EC2 instance metadata, use this Skill to enumerate the associated IAM principal's permissions and confirm whether sensitive S3 buckets or Lambda functions are accessible.

Quick Start

Use the pacu-aws-exploitation skill to validate the impact of temporary AWS credentials obtained from a confirmed SSRF vulnerability in your authorized web test scope.