Use this bot to monitor new CVEs containing defined keywords and send alerts to Slack and/or Telegram.

A curated set of offensive security notes on vulnerabilities, techniques, and tools

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Worshop en Red Team Space, Ekoparty 2023

Identify privilege escalation paths within and across different clouds

A PowerShell malware that disables all the Windows Security features with UAC Bypass and Anti-VM features. (Designed to work both as a powershell script and as an executable (.exe) file.)

This repository provides a single file containing a cheat sheet for privilege escalation techniques on Unix/Linux-like operating systems. It includes a collection of useful commands and tips for identifying potential privilege escalation vectors, designed for security professionals, enthusiasts and especially penetration testers.

DeadPotato is a windows privilege escalation utility from the Potato family of exploits, leveraging the SeImpersonate right to obtain SYSTEM privileges. This script has been customized from the original GodPotato source code by BeichenDream.

Get GTFOBins info about a given exploit from the command line

CDPwn is a python script designed to capture screenshots of files via the Chrome DevTools Protocol (CDP), a technique useful for privilege escalation when the CDP service runs with root permissions.

Checker for CVE-2021-3156 with static version check

WallEscape vulnerability in util-linux

This repository contains my writeups for rooms created by TryHackMe

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

Audit and pentest methodologies for Windows including internal enumeration, privesc, lateral movement, etc.

Shared library implementations that transform the containing process into a shell when loaded (useful for privilege escalation, argument injection, file overwrites, LD_PRELOAD, etc.).

Ansible Role for AECID Testbed PostExploitation Tools

Linux enumeration tool for pentesting and CTFs with verbosity levels

Collection of PowerShell functions a Red Teamer may use in an engagement

Formidable Unix Binary Arsenal & Repository. TUI built for offline payload generation, retrieval, and exfiltration.