Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.
Die Hauptfunktionen von gtworek/priv2admin sind: Exploit Development, Post Exploitation, Privilege Escalation.
Open-Source-Alternativen zu gtworek/priv2admin sind unter anderem: dec0ne/krbrelayup — Simple wrapper around some of the features of Rubeus and KrbRelay (and a few other honorable mentions in the… rebootuser/linenum — LinEnum is a suite of security utilities for auditing Linux systems, scanning for privilege escalation paths, and… bitsadmin/wesng — This project is a set of specialized utilities for Windows vulnerability assessment and patch management auditing. It… carlospolop/peass-ng — PEASS-ng is a Linux privilege escalation scanner and post-exploitation enumeration tool. It identifies security… specterops/bloodhound — BloodHound is an identity risk management platform and graph-based attack path analyzer used to map identity… beichendream/badpotato.
PEASS-ng is a Linux privilege escalation scanner and post-exploitation enumeration tool. It identifies security vulnerabilities and misconfigurations on Linux systems that could lead to unauthorized elevated access. The tool functions as a security audit utility that discovers system weaknesses and sensitive information after initial access is gained. It scans operating systems to identify specific privilege escalation paths. Findings are converted into structured security audit reports. The tool supports exporting scan results into JSON, HTML, and PDF formats for formal analysis and documen
Simple wrapper around some of the features of Rubeus and KrbRelay (and a few other honorable mentions in the acknowledgements section) in order to streamline the abuse of the following attack primitive:
This project is a set of specialized utilities for Windows vulnerability assessment and patch management auditing. It functions as a vulnerability scanner and exploit suggester that analyzes installed updates to identify missing security patches and their corresponding known vulnerabilities. The system distinguishes itself by matching missing updates against a consolidated vulnerability database to recommend specific publicly available exploits. It maintains accuracy by synchronizing remote security bulletins into a local database and cross-referencing identified gaps against official update
LinEnum is a suite of security utilities for auditing Linux systems, scanning for privilege escalation paths, and enumerating local vulnerabilities. It functions as a system security audit tool, a local enumeration utility, and a scanner for identifying misconfigurations that could allow a user to gain root access. The project includes specialized auditing for containerized environments, specifically detecting Docker and LXC signatures to identify potential escape vectors to the host system. Its broader capabilities cover the analysis of kernel versions, the identification of SUID binaries a