ATT&CK

Threat actorsMITRE ATT&CK intrusion sets Malware & toolsSoftware families & tooling TechniquesTactics & techniques

ReportsPublished APT reporting SourcesEvery feed behind the archive

Developers

JSON APIFree CORS-enabled endpoints MCP serverModel Context Protocol access Source codeThis project on GitHub

Loading the archive…

Open Threat Intel Archive

Indicators are treated as facts and kept with their source_vendor, source URL, and dates; every feed is credited and redistribution-restricted feeds are flagged, not dropped. ATT&CK content is © MITRE, used under its terms. See NOTICE. The archive reports intelligence; it does not editorialize threat.

Indicators Actors Sources API GitHub

Open Threat Intel Archive

← Malware & tools

S1091tool

Pacu

Pacu is an open-source AWS exploitation framework. The tool is written in Python and publicly available on GitHub.

Platforms: IaaS

MITRE ATT&CK ↗

Linked entities · 21

usesT1648Serverless Execution usesT1685.002Disable or Modify Cloud Log usesT1619Cloud Storage Object Discovery usesT1049System Network Connections Discov…usesT1654Log Enumeration usesT1526Cloud Service Discovery usesT1552Unsecured Credentials usesT1686.001Cloud Firewall usesT1098.001Additional Cloud Credentials usesT1555.006Cloud Secrets Management Stores usesT1580Cloud Infrastructure Discovery usesT1059.009Cloud API usesT1530Data from Cloud Storage usesT1078.004Cloud Accounts usesT1119Automated Collection usesT1518.001Security Software Discovery usesT1578.001Create Snapshot usesT1087.004Cloud Account usesT1651Cloud Administration Command usesT1069.003Cloud Groups usesT1546Event Triggered Execution