Dave Yesland

GitHub Action to update the modules Wiki

2

When a new module is added or changed it would be nice to just run a GitHub Action that updates the module details section of the Pacu Wiki. Code is...

Thinking the secrets finder utility should dump the secrets it finds to a file somewhere, otherwise the output can just be lost in stdout.

Add a simple new scenario which abuses an EC2 to escalate privileges. This is mainly to demonstrate some of the use cases of [IAMActionHunter.](https://github.com/RhinoSecurityLabs/IAMActionHunter/tree/main/IAMActionHunter)

Progress LoadMaster unauthenticated command injection module CVE-2024-1212

15

## Verification For more details on the vulnerability: https://rhinosecuritylabs.com/research/cve-2024-1212unauthenticated-command-injection-in-progress-kemp-loadmaster/ https://support.kemptechnologies.com/hc/en-us/articles/23878931058445-LoadMaster-Security-Vulnerability-CVE-2024-1212 The AWS marketplace (https://aws.amazon.com/marketplace/pp/prodview-kgh3dsfk7qcnw) has free trials which can be used by deploying a version before 7.2.59.2 (7.2.59.0). These require...

This is currently a draft for refactoring the help menu in Pacu to make it dynamic instead of a list of commands with a hardcoded help menu string. Still need...