PEASS-ng

PEASS-ng - 权限提升Awesome脚本套件（新一代） 掌握LinPEAS的Linux提权官方课程 查看https://hacktricks-training.com/courses/lhe/ 学习数十种Linux提权技术并精通LinPEAS 基础教程 这里你将找到 用于Windows、Linux/Unix和MacOS的权限提升工具 。 这些工具会搜索可能的 本地权限提升路径 并为你打印出来，带有漂亮的颜色 ，方便你快速识别错误配置。 查看 book.hacktricks.wiki 上的 本地Windows权限提升检查清单 WinPEAS -...

CVE-2026-15409-15410-Framework

1 CVE-2026-15409 | 2 CVE-2026-15410 SonicWall SMA1000 - SSRF → Erlang RCE → Root 提权 漏洞利用框架与安全检测工具 ! 仅限合法用途 - 授权测试 本仓库仅为授权的安全专业人员、蓝队和渗透测试人员提供工具。 未经授权访问计算机系统在 CFAA（美国）、Computer Misuse Act（英国）、TCK 243/244（土耳其）以及全球类似法律 下均属违法行为。 漏洞概述 CVE-2026-15409 是在 SonicWall SMA1000 设备 Work Place 接口中发现的一个严重的未认证服务器...

Exploit-AsIO-Exploit

AsIO-Exploit AsIO3.sys 认证绕过与本地提权概念验证...

PrivEsc

PrivEsc 由 1N3@CrowdShield 提供 http://crowdshield.com 关于: 一个收集了 Windows、Linux 和 MySQL 权限提升脚本和漏洞利用工具的集合。 链接: 预编译的本地 Linux 漏洞利用工具，请查看 https://www.kernel-exploits.com. 捐赠: 欢迎捐赠。 BTC 1Fav36btfmdrYpCAR65XjKHhxuJJwFyKum DASH XoWYdMDGb7UZmzuLviQYtUGb5MNXSkqvXG ETH 0x20bB09273702eaBDFbEE9809473Fd04b969a794...

twiga

Twiga A tool that enumerates Android devices for information useful in understanding its internals and for exploit development. It supports android 4.2 to android 7.1.1 Requirements The most current ADB must be in your path and fully functional The report name must not have any whitespace...

Linux-CopyFail-C-Version-CVE-2026-31431

Linux CopyFail - C 版本 - CVE-2026-31431 Copy Fail（CVE-2026-31431）的简洁 C 语言版本 - 利用 AFALG + authencesn + splice 原语的 Linux 本地权限提升漏洞。通过用一段极小的 setuid shellcode 覆盖 /usr/bin/su 的页缓存来获取 root 权限。仅用于教育目的的验证性概念证明。 Copy Fail Linux 本地权限提升漏洞（CVE-2026-31431）的简洁、可读的 C 语言实现。 这是原始压缩版 Python 漏洞利用的移植版本。 警告...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS 本地提权 受影响版本 Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM 使用方法 gcc exploit.c -o exploit ./exploit 描述 "Linux 内核中 overlayfs 文件系统存在的 Ubuntu 特有漏洞，它未能在用户命名空间方面正确验证文件系统 capabilities 的应用。由于 Ubuntu 携带了允许非特权 overlayfs...

patch-checker

PatchChecker This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application running on flask that provides output similar to that of Watson. However by using PatchChecker, one is not required to execute a binary on the target machine...

pwncat_pwnkit

pwncatpwnkit 简介 该模块的目的是在使用 pwncat 时，尝试在目标上利用 CVE-2021-4034（pwnkit）漏洞。 无需设置任何目录、编译任何源代码，甚至无需在远程目标上安装 gcc；pwnkit 模块会利用 pwncat 框架自动处理这一切。 设置与使用 只需将 pwnkit.py 复制到主机上安装了 pwncat-cs 的某个位置，例如：/home/user/pwncatmods 在 pwncat 中，直接输入：load /home/user/pwncatmods 要确认模块已加载，输入：search pwnkit。你应该会看到类似这样的内容： local...

HackTheBox-Layover

🧰 HTB / Pentest Writeups My personal knowledge base of Hack T...

OSCP Notes and Custom Dashboard

OSCP Field Notebook Tags: ligolo hashcat Port-indexed pentest methodology notebook: decision trees, copy-paste command patterns, and lessons from authorized practice boxes HTB / PG / personal labs. Merged from the older finalnotes-vault into this single tree. A workflow you can run under time...

linux-privesc-lab

linux-privesc-lab Linux Privilege Escalation Vulnerability...

PEASS-ng v20260801-fa5487e8

PEASS-ng - Privilege Escalation Awesome Scripts SUITE new generation Linux Privesc official course to master LinPEAS Checkhttps://hacktricks-training.com/courses/lhe/ to learn tens of linux privesc techniques and master LinPEAS Basic Tutorial Here you will find privilege escalation tools for...

PEASS-ng v20260731-b76d991c

PEASS-ng - Privilege Escalation Awesome Scripts SUITE new generation Linux Privesc official course to master LinPEAS Checkhttps://hacktricks-training.com/courses/lhe/ to learn tens of linux privesc techniques and master LinPEAS Basic Tutorial Here you will find privilege escalation tools for...

PEASS-ng v20260729-41db79f4

PEASS-ng - Privilege Escalation Awesome Scripts SUITE new generation Linux Privesc official course to master LinPEAS Checkhttps://hacktricks-training.com/courses/lhe/ to learn tens of linux privesc techniques and master LinPEAS Basic Tutorial Here you will find privilege escalation tools for...

PEASS-ng v20260728-e2bfa4fe

PEASS-ng - Privilege Escalation Awesome Scripts SUITE new generation Linux Privesc official course to master LinPEAS Checkhttps://hacktricks-training.com/courses/lhe/ to learn tens of linux privesc techniques and master LinPEAS Basic Tutorial Here you will find privilege escalation tools for...

PEASS-ng v20260726-c62415cf

PEASS-ng - Privilege Escalation Awesome Scripts SUITE new generation Linux Privesc official course to master LinPEAS Checkhttps://hacktricks-training.com/courses/lhe/ to learn tens of linux privesc techniques and master LinPEAS Basic Tutorial Here you will find privilege escalation tools for...

linux-privesc

🐧 Linux Privilege Escalation Toolkit Automated enumeration...

OSCP

OSCP Hello world! This repo contain some of the scripts, exploits, and documents made during my OSCP journey. The list include but not limited to the following: LinuxPrivCheck.sh Yes, there are far better scripts out there, However this one has less output to go thru and it has colors. Think basi...

PrivEsc (Privilege Escalation) in Jira Core Data Center

Summary: This High severity PrivEsc Privilege Escalation vulnerability was introduced in versions 9.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Core Data Center. This PrivEsc Privilege Escalation vulnerability, with a CVSS Score of 7.2, allows an attacker to perform actions as a higher-privileged...