Pacu
Pacu is an open-source AWS exploitation framework designed for offensive security testing against cloud environments through modular attack capabilities.
Pacu is an open-source AWS exploitation framework designed for offensive security testing against cloud environments through modular attack capabilities.
Checked October 2026.
Pacu is an open-source AWS exploitation framework developed by Rhino Security Labs for offensive security testing against cloud environments.
The framework enables penetration testers to identify and exploit configuration flaws within AWS accounts through a modular architecture that allows for easy expansion of functionality.
Current modules support various attack vectors including:
The tool requires Python 3.7+ and pip3 for installation, making it a lightweight solution for cloud penetration testing activities. Pacu focuses specifically on AWS environments and provides a structured approach to testing cloud security configurations and identifying potential vulnerabilities in AWS deployments.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Pacu: features, pricing and alternatives.
Pacu is a product in the Penetration Testing category. It covers Lambda, AWS and Privilege Escalation.
Pacu is free. Download and setup instructions are at https://github.com/RhinoSecurityLabs/pacu/.
Alternatives to Pacu listed on CybersecTools:
Compare all Pacu alternatives at https://cybersectools.com/alternatives/pacu
Pacu is available as on-premises software. It is listed for mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
Open source security auditing tool to search and dump system configuration.
OWASP OWTF is a penetration testing framework focused on efficiency and alignment with security standards.
A tool for embedding XXE/XML exploits into different filetypes
A command-line tool that identifies and extracts parameters from HTTP requests and responses to assist with web application security testing and vulnerability assessment.
Autonomous AI pentest platform delivering audit-grade reports in hours.
A brute force parameter discovery tool for identifying hidden GET and POST parameters in web applications during security assessments.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,023 products.
Connect your AI
