<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Performing Cloud Penetration Testing

## pacu — AWS exploitation framework

```bash
# Enumerate current permissions
pacu > run iam__enum_permissions

# Scan for privilege escalation
pacu > run iam__privesc_scan

```

## prowler — AWS/Azure/GCP security assessment

```bash
# Critical/high findings
prowler aws --severity critical high -M json

# Custom check list
prowler aws --checks-file checks.txt

```

## scoutsuite — Multi-cloud security auditing

```bash
# Full AWS audit
scout aws --report-dir results/

# Full Azure audit
scout azure --report-dir results/

```
