PacuTool
Pacu is an open-source AWS exploitation framework. The tool is written in Python and publicly available on GitHub.From MITRE ATT&CK
Last reported 5 days ago, by Datadog Security Labs2 reports
ATT&CK techniques
2 techniques · each with the sentence it comes from- T1110Brute Force
“This can be indicative of a brute force or password spraying attack.”
- T1110.003Password Spraying
“This can be indicative of a brute force or password spraying attack.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
2 reports, newest first · the exact sentence from each-
Introducing pathrunner: An AWS privilege escalation framework“And even in the AWS cloud realm, we have Pacu and Nebula.”
-
Security operations: Cloud monitoring and detection with Elastic Security“In this demonstration, we'll use Pacu to perform our attack.”
Indicators in its reports
named in the reports above- pathfinding[.]cloudin 1 report
- hxxps://pathfinding[.]cloud/pathrunner/in 1 report
Copy these 2 indicators · defanged
Thanks — we review every report.