PEASS-ng

PEASS-ng - 特権昇格用オースサムスクリプトスイート 新世代 LinPEASマスターのための公式Linux特権昇格コース LinPEASをマスターするために、数多くのLinux特権昇格テクニックを学ぶにはhttps://hacktricks-training.com/courses/lhe/ をチェックしてください 基本チュートリアル ここでは、Windows、Linux/Unix、およびMacOS向けの特権昇格ツール を見つけることができます。 これらのツールは、悪用可能なローカル特権昇格の経路 を探し出し、見やすい色 で出力してくれるので、誤設定を簡単に認識できます。...

twiga

Twiga A tool that enumerates Android devices for information useful in understanding its internals and for exploit development. It supports android 4.2 to android 7.1.1 Requirements The most current ADB must be in your path and fully functional The report name must not have any whitespace...

PrivEsc

PrivEsc by 1N3@CrowdShield http://crowdshield.com INFORMAZIONI: Una raccolta di script e exploit per l'escalation dei privilegi su Windows, Linux e MySQL. LINK: Per exploit Linux locali precompilati, consulta https://www.kernel-exploits.com. DONAZIONI: Le donazioni sono benvenute. BTC...

Linux-CopyFail-C-Version-CVE-2026-31431

Linux CopyFail – C-Version – CVE-2026-31431 Saubere C-Version von Copy Fail CVE-2026-31431 – Linux Local Privilege Escalation-Exploit unter Verwendung von AFALG + authencesn + splice-Primitive. Überschreibt den Page Cache von /usr/bin/su mit einem winzigen setuid-Shellcode, um Root-Rechte zu...

CVE-2026-15409-15410-Framework

1 CVE-2026-15409 | 2 CVE-2026-15410 SonicWall SMA1000 - SSRF → Erlang RCE → Root Privesc Framework di Exploit e Strumento di Rilevamento Sicuro Solo per test di sicurezza autorizzati. ⚖️ Disclaimer Legale e Uso Responsabile Questo strumento è fornito esclusivamente a scopo educativo e per test di...

pwncat_pwnkit

pwncatpwnkit مقدمة الغرض من هذه الوحدة هو محاولة استغلال CVE-2021-4034 pwnkit على الهدف عند استخدام pwncat. لا حاجة لإعداد أي مجلدات، أو تجميع أي كود مصدري، أو حتى وجود gcc على الهدف البعيد؛ فوحدة pwnkit تتولى ذلك تلقائيًا باستخدام إطار عمل pwncat. الإعداد والاستخدام ببساطة انسخ pwnkit.py إلى أي...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Escalation locale dei privilegi Versioni interessate Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Utilizzo gcc exploit.c -o exploit ./exploit Descrizione "Problema specifico di Ubuntu nel filesystem overlayfs del kern...

patch-checker

PatchChecker This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application running on flask that provides output similar to that of Watson. However by using PatchChecker, one is not required to execute a binary on the target machine...

oscp-notes-2026

OSCP फील्ड नोटबुक पोर्ट-अनुक्रमित पेंटेस्ट पद्धति नोटबुक: निर्णय वृक्ष, कॉपी-पेस्ट कमांड पैटर्न और अधिकृत अभ्यास बॉक्स HTB / PG / व्यक्तिगत लैब से सबक। पुराने finalnotes-vault को विलय करके इस एकल ट्री में लाया गया। एक वर्कफ़्लो जिसे आप समय के दबाव में चला सकते हैं। पहले कमांड और निर्णय वृक्ष। केव...

OSCP

OSCP Hello world! This repo contain some of the scripts, exploits, and documents made during my OSCP journey. The list include but not limited to the following: LinuxPrivCheck.sh Yes, there are far better scripts out there, However this one has less output to go thru and it has colors. Think basi...

PrivEsc (Privilege Escalation) in Jira Core Data Center

Summary: This High severity PrivEsc Privilege Escalation vulnerability was introduced in versions 9.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Core Data Center. This PrivEsc Privilege Escalation vulnerability, with a CVSS Score of 7.2, allows an attacker to perform actions as a higher-privileged...

RHEL 6 : pacemaker (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local...

Linux-Smart-Enumeration - Linux Enumeration Tool For Pentesting And CTFs With Verbosity Levels

First, a couple of useful oneliners ; wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo lse.sh;chmod 700 lse.sh Note that...

RHEL 6 : pacemaker (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local...

RHEL 9 : Red Hat build of MicroShift 4.14.0 (RHSA-2023:5008)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5008 advisory. Red Hat build of MicroShift is Red Hat's light-weight Kubernetes orchestration solution designed for edge device deployments and is built fr...

RHEL 8 / 9 : OpenShift Container Platform 4.12.24 (RHSA-2023:3976)

The remote Redhat Enterprise Linux 8 / 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:3976 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...

RHEL 8 / 9 : OpenShift Container Platform 4.13.5 (RHSA-2023:4093)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4093 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

RHEL 8 : OpenShift Container Platform 4.11.34 (RHSA-2023:1503)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:1503 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...

RHEL 7 / 8 : OpenShift Container Platform 4.10.67 (RHSA-2023:4898)

The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:4898 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...

New CherryLoader Malware Mimics CherryTree to Deploy PrivEsc Exploits

A new Go-based malware loader called CherryLoader has been discovered by threat hunters in the wild to deliver additional payloads onto compromised hosts for follow-on exploitation. Arctic Wolf Labs, which discovered the new attack tool in two recent intrusions, said the loader's icon and name...