Tools
pacu
RhinoSecurityLabs/pacu
An open-source AWS exploitation framework for offensive security testing. Penetration testers use its pluggable modules to enumerate, escalate privileges, backdoor IAM users, and exfiltrate data from cloud environments.
Topics
Related projects
dirsearch15.1kdirsearch is an advanced web path brute-forcer that enumerates directories and files using wordlists. It supports recursion, filtering, proxies, resumable sessions and a Python API, making it a common tool for penetration testers performing web reconnaissance.
cloudsplaining2.3kCloudsplaining is an AWS IAM security assessment CLI that finds least-privilege violations and produces a risk-prioritized HTML report.- policy_sentry2.2kPolicy Sentry is a CLI and Python library that generates least-privilege AWS IAM policies from resource ARNs and access levels, helping teams avoid hand-writing overly broad permissions.
evillimiter2kEvil Limiter is a Linux network tool that monitors and throttles the upload and download bandwidth of devices on a local network using ARP spoofing and traffic shaping.
mitmproxy46.9kAn interactive TLS-capable intercepting HTTP proxy with console, command-line, and web interfaces, used by pentesters and developers for debugging and security testing.
sops23.7kAn editor of encrypted files that supports YAML, JSON, ENV, and binary formats, using cloud KMS, age, or PGP keys to manage secrets safely.