> ## Documentation Index
> Fetch the complete documentation index at: https://rootea.es/llms.txt
> Use this file to discover all available pages before exploring further.

# Pacu (AWS exploitation framework)

> Framework de Rhino Security Labs para post-explotación AWS.

# Pacu (AWS exploitation framework)

<p className="glossary-answer">Framework de Rhino Security Labs para post-explotación AWS.</p>

**Categoría:** [Cloud (AWS · Azure · GCP)](/glosario)

🎯 **Trinchera** — Framework de Rhino Security Labs para
post-explotación AWS. 35+ módulos: enum, IAM privesc scan, S3
bucket finder, CloudTrail evasion, persistence, exfil.

🔗 **Kill chain** — `pacu --session demo` → `import_keys` →
`run iam__bruteforce_permissions` → `run iam__privesc_scan` →
auto-explota uno de los 21 paths de Rhino si aplica.

📡 **Huella defensiva** — CloudTrail ve cada API call individual.
Pacu no obfusca por defecto.

⚠️ **Falso amigo** — Pacu requiere creds válidas para empezar.
No es scanner externo.

🛡️ **Remediación** — Detección por GuardDuty
`Recon:IAMUser/MaliciousIPCaller`, alertas Athena sobre
volumen anómalo de IAM calls.

***

← [Volver al glosario completo](/glosario)

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"DefinedTerm","name":"Pacu (AWS exploitation framework)","description":"Framework de Rhino Security Labs para post-explotación AWS.","inDefinedTermSet":{"@type":"DefinedTermSet","name":"Glosario táctico de pentesting","url":"https://rootea.es/glosario"},"url":"https://rootea.es/glosario/pacu-aws-exploitation-framework"}`}
</script>

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Inicio","item":"https://rootea.es"},{"@type":"ListItem","position":2,"name":"Glosario táctico","item":"https://rootea.es/glosario"},{"@type":"ListItem","position":3,"name":"Pacu (AWS exploitation framework)","item":"https://rootea.es/glosario/pacu-aws-exploitation-framework"}]}`}
</script>

*Última actualización: 2026-06-11*