Privilege escalation and gathering credentials using Pacu

Prior to trying to detect and exploit privilege escalation for our target user, we are going to add another policy that will make the user vulnerable to privilege escalation. Add an inline policy named PutUserPolicy to our original Test user with the following document before proceeding:

{ 
    "Version": "2012-10-17", 
    "Statement": [ 
        { 
            "Effect": "Allow", 
            "Action": "iam:PutUserPolicy", 
            "Resource": "*" 
        } 
    ] 
} 

This policy gives our user access to run the iam:PutUserPolicy API action on any user.

Pacu – an open source AWS exploitation toolkit

...