swisskyrepo / PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

security hacking web-application cheatsheet enumeration penetration-testing bounty vulnerability methodology bugbounty pentest bypass payload payloads hacktoberfest privilege-escalation redteam

Updated May 10, 2021
Python

vitalysim / Awesome-Hacking-Resources

Star

A collection of hacking / penetration testing resources to make you better!

exploit reverse-engineering malware mitm hacking owasp penetration-testing ctf privilege-escalation buffer-overflow windows-privilege-escalation privilege-escalation-linux

Updated Nov 11, 2020

rmusser01 / Infosec_Reference

Star

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

windows linux osx reverse-engineering hacking forensics penetration-testing infosec pentesting references information-security privilege-escalation exfiltration infosec-reference red-team blueteam hacking-simulator privilege-escalation-exploits mitre-attack-db

Updated Apr 30, 2021

k8gege / K8tools

Star

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

database apt exploit scanner hacking password poc brute-force pentest bypass crack privilege-escalation 0day getshell netscan rar-mysql

Updated May 1, 2021
PowerShell

xairy / linux-kernel-exploitation

Star

A collection of links related to Linux kernel security and exploitation

security exploit linux-kernel kernel-exploitation privilege-escalation

Updated May 3, 2021

liamg / traitor

Sponsor Star

Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins ⬆️

☠️

exploit infosec privilege-escalation security-tools privesc hackthebox gtfobins redteam-tools

Updated Apr 13, 2021
Go

Ignitetechnologies / Privilege-Escalation

Star

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

hack hacking cheatsheet ctf-writeups ctf vulnhub privilege-escalation oscp ctf-challenges oscp-journey oscp-prep

Updated Jan 3, 2021

S1ckB0y1337 / Active-Directory-Exploitation-Cheat-Sheet

Star

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

windows security attack active-directory hacking cheatsheet enumeration activedirectory penetration-testing cheat pentesting exploitation hacking-tool privilege-escalation cheat-sheet hacking-tools windows-active-directory active-directory-cheatsheet active-directory-exploitation hacking-cheasheet

Updated May 6, 2021

diego-treitos / linux-smart-enumeration

Star

Linux enumeration tool for pentesting and CTFs with verbosity levels

hacking pentesting privilege-escalation oscp ctfs privesc hackthebox linux-enumeration

Updated Apr 28, 2021
Shell

S3cur3Th1sSh1t / WinPwn

Sponsor Star

Automation for internal Windows Penetrationtest / AD-Security

automation powershell pentesting recon exploitation privilege-escalation pentest-tool redteam powersploit adsecurity

Updated May 13, 2021
PowerShell

ohpe / juicy-potato

Star

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

windows privilege-escalation dcom rottenpotatong juicy-potato clsid

Updated Mar 9, 2021
C++

nil0x42 / phpsploit

Sponsor Star

Open

plugins/proclist: Implement a full-php way to get process list in Linux

2

nil0x42 commented Oct 3, 2020

Current implementation of proclist plugin uses win32_ps_list_procs() php function on Windows host.

Therefore, linux implementation is a simple system("ps -a"), which is OPSEC unsafe, an would probably trigger EDR alerts.

A better implementation should avoid relying on system command execution.

xairy / kernel-exploits

Star

My proof-of-concept exploits for the Linux kernel

exploit linux-kernel kernel-exploitation privilege-escalation

Updated Mar 30, 2020
C

itm4n / PrivescCheck

Star

Privilege Escalation Enumeration Script for Windows

windows pentesting privilege-escalation pentest-tool windows-privilege-escalation

Updated Apr 14, 2021
PowerShell

TH3xACE / SUDO_KILLER

Star

A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo for linux privilege escalation.

sudo exploits ctf cve pentest privilege-escalation oscp pentest-tool linux-exploits oscp-journey misconfiguration oscp-tools oscp-prep sudo-exploitation abuse-sudo

Updated May 16, 2021
Shell

quentinhardy / odat

Star

ODAT: Oracle Database Attacking Tool

pentest oracle-database privilege-escalation pentest-tool

Updated Mar 12, 2021
Python

Integration-IT / Active-Directory-Exploitation-Cheat-Sheet

Star

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

windows security powershell active-directory hacking cheatsheet enumeration penetration-testing infosec pentesting exploitation hacking-tool privilege-escalation cheat-sheet hacking-tools windows-active-directory active-directory-cheatsheet active-directory-exploitation hacking-cheasheet

Updated Nov 14, 2020
PowerShell

ihack4falafel / OSCP

Star

Collection of things made during my OSCP journey

python c bash exploit scripts vbscript batch-script privilege-escalation buffer-overflow oscp privesc privilege-escalation-exploits oscp-journey

Updated Feb 22, 2018
Python

quentinhardy / msdat

Star

MSDAT: Microsoft SQL Database Attacking Tool

pentest privilege-escalation mssql-database pentest-tool

Updated Mar 9, 2021
Python

initstring / dirty_sock

Star

Linux privilege escalation exploit via snapd (CVE-2019-7304)

linux security privilege-escalation

Updated May 9, 2019
Python

lu4p / ToRat

Sponsor Star

ToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication

Updated May 16, 2021
Go

WADComs / WADComs.github.io

Sponsor Star

WADComs is an interactive cheat sheet, containing a curated list of Unix/Windows offensive tools and their respective commands.

windows persistence commands cheatsheet enumeration exploitation privilege-escalation blueteam redteam wadcoms

Updated Dec 31, 2020
HTML

m0nad / awesome-privilege-escalation

Star

A curated list of awesome privilege escalation

docker awesome hacking nfs awesome-list pentesting ctf pentest privilege-escalation oscp dll-hijacking htb hack-the-box linux-enumeration

Updated Apr 25, 2021

lawrenceamer / 0xsp-Mongoose

Star

a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and privilege escalations attacks, replicate the tactics and techniques of an advanced adversary in a network.

windows agent security-audit toolkit mongoose webapi privilege-escalation security-tools impersonation redteaming redteam windows-vulnerability backdoor-attacks lateral-movement 0xsp-mongoose

Updated May 13, 2021
Pascal

NullArray / RootHelper

Star

A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.

linux bash enumeration exploits root shellscript privilege-escalation

Updated Dec 2, 2020
Shell

ihebski / A-Red-Teamer-diaries

Star

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

Updated Dec 2, 2020

BeichenDream / BadPotato

Star

Windows 权限提升 BadPotato

privilege-escalation potato badpotato pipepotato

Updated May 10, 2020
C#

Anon-Exploiter / SUID3NUM

Star

A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)

Updated Oct 9, 2020
Python

marcosValle / awesome-windows-red-team

Star

A curated list of awesome Windows frameworks, libraries, software and resources for Red Teams

windows awesome powershell phishing awesome-list dde kerberos pentest evasion windows-exploitation privilege-escalation red-teams

Updated Feb 20, 2020

stealthcopter / deepce

Star

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

enumeration exploits privilege-escalation privilege-escalation-exploits container-escape deepce docker-enumeration

Updated May 3, 2021
Shell

Apr	MAY	Jun
	17
2020	2021	2022

privilege-escalation

Here are 145 public repositories matching this topic...

swisskyrepo / PayloadsAllTheThings

vitalysim / Awesome-Hacking-Resources

rmusser01 / Infosec_Reference

k8gege / K8tools

xairy / linux-kernel-exploitation

liamg / traitor

Ignitetechnologies / Privilege-Escalation

S1ckB0y1337 / Active-Directory-Exploitation-Cheat-Sheet

diego-treitos / linux-smart-enumeration

S3cur3Th1sSh1t / WinPwn

ohpe / juicy-potato

nil0x42 / phpsploit

plugins/proclist: Implement a full-php way to get process list in Linux

xairy / kernel-exploits

itm4n / PrivescCheck

TH3xACE / SUDO_KILLER

quentinhardy / odat

Integration-IT / Active-Directory-Exploitation-Cheat-Sheet

ihack4falafel / OSCP

quentinhardy / msdat

initstring / dirty_sock

lu4p / ToRat

WADComs / WADComs.github.io

m0nad / awesome-privilege-escalation

lawrenceamer / 0xsp-Mongoose

NullArray / RootHelper

ihebski / A-Red-Teamer-diaries

BeichenDream / BadPotato

Anon-Exploiter / SUID3NUM

marcosValle / awesome-windows-red-team

stealthcopter / deepce

Improve this page

Add this topic to your repo