PEASS-ng

PEASS-ng - 权限提升Awesome脚本套件（新一代） 掌握LinPEAS的Linux提权官方课程 查看https://hacktricks-training.com/courses/lhe/ 学习数十种Linux提权技术并精通LinPEAS 基础教程 这里你将找到 用于Windows、Linux/Unix和MacOS的权限提升工具 。 这些工具会搜索可能的 本地权限提升路径 并为你打印出来，带有漂亮的颜色 ，方便你快速识别错误配置。 查看 book.hacktricks.wiki 上的 本地Windows权限提升检查清单 WinPEAS -...

PrivEsc

PrivEsc 由 1N3@CrowdShield 提供 http://crowdshield.com 关于: 一个收集了 Windows、Linux 和 MySQL 权限提升脚本和漏洞利用工具的集合。 链接: 预编译的本地 Linux 漏洞利用工具，请查看 https://www.kernel-exploits.com. 捐赠: 欢迎捐赠。 BTC 1Fav36btfmdrYpCAR65XjKHhxuJJwFyKum DASH XoWYdMDGb7UZmzuLviQYtUGb5MNXSkqvXG ETH 0x20bB09273702eaBDFbEE9809473Fd04b969a794...

Linux-CopyFail-C-Version-CVE-2026-31431

Linux CopyFail- C Version - CVE-2026-31431 Clean C version of Copy Fail CVE-2026-31431 - Linux Local Privilege Escalation exploit using AFALG + authencesn + splice primitive. Overwrites the page cache of /usr/bin/su with a tiny setuid shellcode to gain root privileges. Educational proof-of-concep...

CVE-2026-15409-15410-Framework

1 CVE-2026-15409 | 2 CVE-2026-15410 SonicWall SMA1000 - SSRF → Erlang RCE → Root Privesc 漏洞利用框架与安全检测工具 仅限授权的安全测试使用。 ⚖️ 法律免责声明与责任使用 此工具仅供教育和授权的渗透测试目的使用。 作者和贡献者对该软件造成的任何滥用或损害概不负责。用户有责任确保在测试前已获得目标所有者的明确书面许可。未经授权访问计算机系统违反《计算机欺诈和滥用法》CFAA 及全球类似法律，属违法行为。 使用本软件即表示您同意： 仅在自己的系统或已获得明确许可的系统上使用。...

pwncat_pwnkit

pwncatpwnkit Introducción El propósito de este módulo es intentar explotar CVE-2021-4034 pwnkit en un objetivo cuando se utiliza pwncat. No es necesario configurar directorios, compilar ningún código fuente ni siquiera tener gcc en el objetivo remoto; el módulo pwnkit se encarga de esto...

twiga

Twiga A tool that enumerates Android devices for information useful in understanding its internals and for exploit development. It supports android 4.2 to android 7.1.1 Requirements The most current ADB must be in your path and fully functional The report name must not have any whitespace...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Escalation locale dei privilegi Versioni interessate Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Utilizzo gcc exploit.c -o exploit ./exploit Descrizione "Problema specifico di Ubuntu nel filesystem overlayfs del kern...

patch-checker

PatchChecker This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application running on flask that provides output similar to that of Watson. However by using PatchChecker, one is not required to execute a binary on the target machine...

oscp-notes-2026

OSCP फील्ड नोटबुक पोर्ट-अनुक्रमित पेंटेस्ट पद्धति नोटबुक: निर्णय वृक्ष, कॉपी-पेस्ट कमांड पैटर्न और अधिकृत अभ्यास बॉक्स HTB / PG / व्यक्तिगत लैब से सबक। पुराने finalnotes-vault को विलय करके इस एकल ट्री में लाया गया। एक वर्कफ़्लो जिसे आप समय के दबाव में चला सकते हैं। पहले कमांड और निर्णय वृक्ष। केव...

OSCP

OSCP Hello world! This repo contain some of the scripts, exploits, and documents made during my OSCP journey. The list include but not limited to the following: LinuxPrivCheck.sh Yes, there are far better scripts out there, However this one has less output to go thru and it has colors. Think basi...

PrivEsc (Privilege Escalation) in Jira Core Data Center

Summary: This High severity PrivEsc Privilege Escalation vulnerability was introduced in versions 9.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Core Data Center. This PrivEsc Privilege Escalation vulnerability, with a CVSS Score of 7.2, allows an attacker to perform actions as a higher-privileged...

RHEL 6 : pacemaker (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local...

Linux-Smart-Enumeration - Linux Enumeration Tool For Pentesting And CTFs With Verbosity Levels

First, a couple of useful oneliners ; wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo lse.sh;chmod 700 lse.sh Note that...

RHEL 6 : pacemaker (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local...

RHEL 9 : Red Hat build of MicroShift 4.14.0 (RHSA-2023:5008)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5008 advisory. Red Hat build of MicroShift is Red Hat's light-weight Kubernetes orchestration solution designed for edge device deployments and is built fr...

RHEL 8 / 9 : OpenShift Container Platform 4.13.5 (RHSA-2023:4093)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4093 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

RHEL 8 / 9 : OpenShift Container Platform 4.12.24 (RHSA-2023:3976)

The remote Redhat Enterprise Linux 8 / 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:3976 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...

RHEL 8 : OpenShift Container Platform 4.11.34 (RHSA-2023:1503)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:1503 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...

RHEL 7 / 8 : OpenShift Container Platform 4.10.67 (RHSA-2023:4898)

The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:4898 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...

New CherryLoader Malware Mimics CherryTree to Deploy PrivEsc Exploits

A new Go-based malware loader called CherryLoader has been discovered by threat hunters in the wild to deliver additional payloads onto compromised hosts for follow-on exploitation. Arctic Wolf Labs, which discovered the new attack tool in two recent intrusions, said the loader's icon and name...