Multi-architecture Linux privilege escalation toolkit with 29 pre-built and runtime-compilable exploits. Auto-detects kernel version, filters patched exploits, tries each until root.
☆421Sep 23, 2026Updated last month
Alternatives and similar repositories for lpe-toolkit
Users that are interested in lpe-toolkit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Code and data for our paper "Onelogon: Taking over Active Directory Accounts via Netlogon" (WOOT’26).☆128Sep 1, 2026Updated last month
- CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH☆143Jul 7, 2026Updated 3 months ago
- CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM☆48Jul 16, 2026Updated 3 months ago
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆75Oct 10, 2026Updated last week
- Linux LPE - Reliable Jail/Container Escape☆53Jun 29, 2026Updated 3 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- CVE-85884 POC☆35Oct 13, 2026Updated last week
- Polymorphic PE rewriter for Windows x64 , rewrites binaries into semantically identical but byte-different variants☆201Jun 6, 2026Updated 4 months ago
- Netlogon and CLDAP vulnerability research with a proof of concept.☆233Jun 2, 2026Updated 4 months ago
- Decentralized C2 framework built on libp2p☆479Jun 16, 2026Updated 4 months ago
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆16Jul 27, 2026Updated 2 months ago
- Extract Windows credentials directly from VM memory snapshots and virtual disks☆1,636Oct 2, 2026Updated 3 weeks ago
- ☆127Apr 23, 2026Updated 6 months ago
- Async BOF to automatically extract or renew Kerberos TGTs on a target system.☆139Jul 23, 2026Updated 3 months ago
- Certighost POC☆336Jul 28, 2026Updated 2 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆72Jul 12, 2026Updated 3 months ago
- another PrivEsc potato...☆120Sep 5, 2026Updated last month
- DCOM in memory and fileless lateral movement techniques through .Net deserilization☆294Jun 22, 2026Updated 4 months ago
- ☆251Mar 13, 2026Updated 7 months ago
- Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browser…☆264May 18, 2026Updated 5 months ago
- Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-writ…☆108Aug 16, 2026Updated 2 months ago
- Hidden Desktop Plugin For Havoc C2,Soon coming for Sliver.☆258Sep 29, 2026Updated 3 weeks ago
- Post-exploitation and evasion research toolkit for Linux.☆292Jul 22, 2026Updated 3 months ago
- OneDrive as a covert C2 transport for Cobalt Strike☆76Sep 19, 2026Updated last month
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- A Cobalt Strike Beacon Object File that exploits the BlueHammer vulnerability that to obtain a copy of the SAM database.☆167Apr 15, 2026Updated 6 months ago
- P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an executi…☆241Jul 8, 2026Updated 3 months ago
- poc it like it's hot☆1,129Oct 15, 2026Updated last week
- Phantom-Evasion-Loader is a standalone, pure x64 Assembly injection engine engineered to minimize the detection surface of modern EDR/XDR…☆114Aug 8, 2026Updated 2 months ago
- Proof of concept for Kerberos Armoring abuse.☆86Dec 12, 2025Updated 10 months ago
- A stealthy and modular Windows loader designed to bypass modern EDR solutions using Module Stomping, Stack Duplication, and Advanced Slee…☆112Jul 26, 2026Updated 2 months ago
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆343Feb 2, 2026Updated 8 months ago
- Async BOF that monitors USB device connect/disconnect events, reports device information and performs actions on connected USB storage vo…☆58Jul 23, 2026Updated 3 months ago
- CVE-2026-24294 PoC☆62Apr 30, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Cross-platform network execution toolkit (SMB/Kerberos/WMI/LDAP/DCSync) built on TrustedSec's Titanis - NetExec-style workflow in C#☆82Sep 18, 2026Updated last month
- Dump TGTs remotely and convert Windows' klist binary output to ccache.☆105Aug 6, 2026Updated 2 months ago
- test☆108Apr 25, 2026Updated 5 months ago
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆116Jul 14, 2026Updated 3 months ago
- ☆107Sep 18, 2026Updated last month
- Silverseal is an open-source Linux bootkit and rootkit framework written in Rust, using UEFI and early kernel boot hooks to load a stealt…☆172Oct 8, 2026Updated 2 weeks ago
- Exploitation of CVE-2025-29969☆69Feb 20, 2026Updated 8 months ago