Awesome-RedTeam-Cheatsheet

Red Team Techniques Initial Access Techniques soon Code Execution Techniques soon Lateral Mouvement Techniques soon Evasion Techniques soon Persistence Techniques soon Privilege Escalation Techniques soon Credential Dumping Techniques soon Pivoting Techniques soon Windows Protocols and...

CVE-2022-21392

CVE-2022-21392: Local Privilege Escalation via NMR SUID in Oracle Enterprise Manager In Oracle installations, where the “nmr” binary is present and SUID-ed as “root”, due to insecure directory permissions, the “oracle” user can elevate his/her privileges to that of the “root” user by replacing th...

vss-fr2system

vss-fr2system Two small tools that turn an arbitrary file read bug on Windows into a SYSTEM shell. vssfreeze/ — creates a Volume Shadow Copy as a standard user , then holds it open so you have time to read the SAM/SECURITY/SYSTEM hives out of it fr2system/ — takes the hives you copied out, decryp...

CVE-2026-74939-escape-the-mac-n-cheese-box

CVE-2026-74939 — Firefox content→parent privilege escalation Proof of concept for a sandbox escape in Firefox 149.0a1 nightly 2fbc0748c4, pre-fix. A compromised content process forges an IPDL message that makes the parent load a page into a privileged privilegedabout process. This is the stage-2...

YAPS

YAPS - Y et A nother P HP S hell Yes, as the name reveals, this is yet another PHP reverse shell, one more among hundreds available out there, but with some advantages. It is a single PHP file containing all its functions and you can control it via a simple TCP listener e.g. nc -lp 1337. In the...

CVE-2025-32463-PoC

CVE-2025-32463 – Privilege Escalation via Sudo chroot 📝 Overview CVE-2025-32463 is a local privilege escalation vulnerability affecting the sudo utility. It allows a regular user to escalate privileges to root by exploiting the -R option which sets a custom runtime root directory together with...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits A collection of exploits and documentation for penetration testers and red teamers that can be used to aid the exploitation of the Linux Dirty Pipe vulnerability. About The Vulnerability Dirty Pipe CVE-2022-0847 is a local privilege escalation vulnerability in the...

CVE-2023-22809

CVE-2023-22809 Ref: https://vulners.com/cve/CVE-2023-22809 Exploit Title: sudo 1.8.0 - 1.9.12p1 - Privilege Escalation Exploit Author: n3m1.sys CVE: CVE-2023-22809 Date: 2023/01/21 Vendor Homepage: https://www.sudo.ws/ Software Link: https://www.sudo.ws/dist/sudo-1.9.12p1.tar.gz Version: 1.8.0 to...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did no...

CVE-2020-36603

CVE-2020-36603 The HoYoVerse formerly miHoYo Genshin Impact mhyprot2.sys 1.0.0.0 anti-cheat driver does not adequately restrict unprivileged function calls, allowing local, unprivileged users to execute arbitrary code with SYSTEM privileges on Microsoft Windows systems. The mhyprot2.sys driver mu...

MicroTrick

MikroTrick PoC — CVE-2026-86060 RouterOS unauthenticated full takeover pocmikrotrick.py is a self-contained exploit for the SSH attack chain that CERT Polska disclosed as "MikroTrick" on 2026-09-05, exploited in the wild since at least 2026-09-02 against internet-facing MikroTik RouterOS devices....

CVE-2023-35001

nftables oob read/write exploit CVE-2023-35001 Exploit used at pwn2own Vancouver 2023 on Ubuntu desktop. The exploit supports the kernel version available at the beginning of the event 5.19.0-35. Requirements C compiler Go compiler Usage Build $ make Run $ ./exploit This produces a lpe.zip file...

CVE-2025-2304-POC

CVE-2025-2304 Privilege Escalation in Camaleon CMS Example python3 exploit.py http://target.com attacker attacker After successful exploitation, logout and login again to gain admin privileges. References https://nvd.nist.gov/vuln/detail/CVE-2025-2304...

CVE-2025-21420-PoC

CVE-2025-21420 PoC Windows Disk Cleanup Tool Elevation of Privilege Vulnerability AFAIK, albeit incomplete, this is the first PoC to this CVE. https://nvd.nist.gov/vuln/detail/CVE-2025-21420 https://vulners.com/cve/CVE-2025-21420 We found a way to DLL sideload with cleanmgr.exe $ cp .\dokan1.dll...

CVE-2022-0847

Information Exploit Title: Local Privilege Escalation in Linux kernel CVE-2022-0847 Date: 03/07/2022 Exploit Author: Max Kellermann Tested on: ubuntu 20.04.1 LTS Affect product:Linux kernel 5.8 or later Fixed Product:Linux kernel 5.16.11, 5.15.25, 5.10.102 CVE ID: CVE-2022-0847 How to Exploit Tes...

ghostlock-custom

GhostLock Custom — CVE-2026-43499 Adaptation A GhostLock CVE-2026-43499 privilege escalation exploit targeting non-Android Linux 6.x ARM64 kernels. Kernel Characteristics Item| Value ---|--- Architecture| ARM64 AArch64 VABITS| 39 KIMAGETEXTBASE| 0xffffffc008000000 Kernel version| 6.x SELinux| Non...

CVE-2019-19033

CVE-2019-19033: Jalios JCMS 10 Backdoor Account / Authentication Bypass I. VULNERABILITY Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account using any username and a specific password. II. CVE REFERENCE...

Copy-Fail-Exploit-CVE-2026-31431

Copy Fail CVE-2026-31431 – Exploit Usage Guide ⚠️ Disclaimer This content is for educational and authorized security testing purposes only. Do NOT run this on systems without explicit permission. 📌 Overview Copy Fail CVE-2026-31431 is a Linux Local Privilege Escalation LPE vulnerability affecting...

Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805

Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 inject a root exploit as a silent installation to perform a malicious task on the device. Vulnerability AndroRAT does not focus on targeting a specific user but rather works to acquire the confidence of the entire network...

CVE-2022-29582-Exploit

CVE-2022-29582 This repository contains exploit code for CVE-2022-29582, a Local Privilege Escalation in iouring of the Linux kernel. Default configurations are affected and no special privileges should be needed. You can find the writeup at...