A Linux Privilege Escalation cheat sheet I made prepping for the OSCP that has mophored into the most comprehensive, specific Linux PrivEsc reference online : )
☆64Mar 21, 2026Updated 7 months ago
Alternatives and similar repositories for LinuxPrivEsc
Users that are interested in LinuxPrivEsc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Multi-protocol credential validation tool with spray and no-spray modes for penetration testing.☆35Jun 1, 2026Updated 5 months ago
- ☆13Mar 25, 2026Updated 7 months ago
- The Mugen Framework (Fork of Havoc)☆12Oct 10, 2026Updated 3 weeks ago
- My OSCP and eCPPTv3 Exam Notes☆44Aug 20, 2025Updated last year
- The only OSCP preparation repository you need: notes, tooling, reporting, prep-list, methodology, and security resources.☆57Jun 13, 2026Updated 4 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Obsidian Notes used to passed the OSCP exam and most HTB machines / challenges.☆64May 20, 2025Updated last year
- Active Directory engagement workspace that combines offline tradecraft, operator-ready commands, attack path analysis, and automated play…☆23Jun 24, 2026Updated 4 months ago
- Run PowerShell command without invoking powershell.exe☆27Apr 9, 2026Updated 6 months ago
- Active Directory enumeration and attack framework written in Go, NetExec-inspired, Manticore-powered, single binary.☆14Oct 30, 2026Updated last week
- CVE-2026-41651 — PackageKit TOCTOU LPE☆17Apr 25, 2026Updated 6 months ago
- Steal Net-NTLMv1 hashes for logged on users without dumping LSASS☆16May 11, 2026Updated 5 months ago
- This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit typ…☆54May 16, 2025Updated last year
- ☆13Nov 29, 2025Updated 11 months ago
- ETWhat is a Windows utility that determines whether Event Tracing for Windows (ETW) providers operate in kernel mode or user mode.☆10Jun 9, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Dumping all keys from a keytab file☆21Dec 1, 2025Updated 11 months ago
- A shellcode loader generator with support for multiple injection techniques, built for red team engagements.☆104Jul 1, 2026Updated 4 months ago
- byebyeAV is a tool created by @amroes which bypassed the latest version at the time of windows defender, Sophos and Kaspersky☆14Sep 5, 2025Updated last year
- ☆21Sep 2, 2026Updated 2 months ago
- Tunneling tool for red teaming, designed to run in memory on a windows target and connect back to a Linux VPS so you can proxy tools into…☆54Aug 3, 2026Updated 3 months ago
- Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable…☆35Mar 28, 2026Updated 7 months ago
- Easy peasy file uploads☆44Jun 18, 2026Updated 4 months ago
- Active Directory forensic framework☆16May 18, 2026Updated 5 months ago
- ADE: automates Active Directory enumeration for labs (Hack The Box, Hack Smarter, TryHackMe, Proving Grounds) and exam prep (OSCP, CPTS).☆36Jul 19, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Native command line grep-like file search utility for Windows. Simple, fast, easy to use.☆64Updated this week
- Dump TGTs remotely and convert Windows' klist binary output to ccache.☆105Aug 6, 2026Updated 3 months ago
- Sh3ller is a lightweight C2 framework in its simplest form.☆33Sep 5, 2025Updated last year
- Malware as a Service Ludus Range☆142Sep 24, 2026Updated last month
- CTF WriteUps by team TWC☆16Jun 3, 2025Updated last year
- ☆19Dec 25, 2025Updated 10 months ago
- Universal exploitation tool for CVE-2025-33073 targeting Windows Domain Controllers with DNSAdmins privileges and WinRM enabled.☆68Nov 14, 2025Updated 11 months ago
- ☆30Sep 8, 2025Updated last year
- The Kerberoasting / AD password-audit wordlist I use on engagements: priority-merged HashMob large list + The-Viper-One's kerberoast_pws,…☆16Oct 2, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- PE-Audit its a Powershell script that check for windows privilege escalation vector☆13Aug 3, 2026Updated 3 months ago
- ☆17Aug 13, 2025Updated last year
- OWASP Hunting: Curated Payloads for Ethical Security Testing and Bug Bounty☆22Oct 28, 2026Updated last week
- Code and data for our paper "Onelogon: Taking over Active Directory Accounts via Netlogon" (WOOT’26).☆129Sep 1, 2026Updated 2 months ago
- Apache HTTP-Server 2.4.49-2.4.50 Path Traversal & Remote Code Execution PoC (CVE-2021-41773 & CVE-2021-42013)☆13Aug 22, 2025Updated last year
- Mobile Mouse 3.6.0.4 could allow a remote attacker to execute arbitrary code on the system, caused by improper input validation. By sendi…☆13Apr 2, 2026Updated 7 months ago
- Lab used for workshop and CTF☆542Oct 28, 2026Updated last week