PacuProxy has been brought up a number of times in this book, but usually it has been casually glanced over. This is because PacuProxy aims to solve a very specific problem when attacking AWS environments that is generally beyond the security posture of most companies moving to the cloud. At a very basic level, PacuProxy is just another command and control framework, such as PowerShell Empire and Meterpreter, but PacuProxy is more cloud-oriented than other similar tools.
The important feature of PacuProxy (outside of just general C2 features, such as payload generation, agent handling, and modules) is that it directly integrates into Pacu's workflow. This means that when you compromise a server, such as an EC2 instance, you can use PacuProxy as your C2 channel and basically proxy your Pacu traffic through the compromised instance. This allows...
