security exploit and privilege escalation collection
For privilege escalation exploits, the first results are diego-treitos/linux-smart-enumeration (This repository provides a Linux enumeration script focused on gathering system information and identifying configuration weaknesses for privilege escalation, matching the Linux-specific aspect of the search), ghostpack/certify (Certify is an Active Directory auditing and post-exploitation tool written in C focused specifically on enumerating and abusing certificate services, making it a valuable component for domain privilege escalation even though it does not cover Linux or container escapes) and ly4k/certipy (This tool focuses on Active Directory Certificate Services enumeration and abuse, directly fulfilling the Active Directory exploitation aspect of your search for privilege escalation research and scripts). peass-ng/peass-ng and powershellmafia/powersploit round out the shortlist. Compare the match explanations and check the project documentation against your requirements.
We curate open-source GitHub repositories matching “privilege escalation exploits”. Results are ranked by relevance to your query — pick filters below to narrow, or refine with AI.
Results for “privilege escalation exploits”
Find the best repos with AI.We'll search the best matching repositories with AI.
- diego-treitos/linux-smart-enumeration
diego-treitos/linux-smart-enumeration
3,932View on GitHubThis project is a comprehensive toolkit for Linux security auditing and system enumeration. It functions as a framework for identifying configuration weaknesses, gathering system information, and detecting vulnerabilities to assist in gaining higher administrative access levels on Linux systems. The toolkit includes specialized capabilities for version-based vulnerability scanning, which matches installed software against known affected releases, and time-window process monitoring to track recurring system patterns and periodic tasks. It also provides infrastructure for hosting and delivering
This repository provides a Linux enumeration script focused on gathering system information and identifying configuration weaknesses for privilege escalation, matching the Linux-specific aspect of the search.
ShellPrivilege Escalation ScanningPrivilege Escalation ScanningPrivilege Escalation - ghostpack/certify
GhostPack/Certify
1,994View on GitHubCertify is a C# tool to enumerate and abuse misconfigurations in Active Directory Certificate Services (AD CS).
Certify is an Active Directory auditing and post-exploitation tool written in C# focused specifically on enumerating and abusing certificate services, making it a valuable component for domain privilege escalation even though it does not cover Linux or container escapes.
C#Active Directory ExploitationActive Directory AuditingDomain Privilege Escalation - ly4k/certipy
ly4k/Certipy
3,562View on GitHubTool for Active Directory Certificate Services enumeration and abuse
This tool focuses on Active Directory Certificate Services enumeration and abuse, directly fulfilling the Active Directory exploitation aspect of your search for privilege escalation research and scripts.
PythonActive Directory ExploitationActive Directory Auditing - peass-ng/peass-ng
peass-ng/PEASS-ng
19,337View on GitHubPEASS-ng is an automated penetration testing framework designed to identify privilege escalation vectors on local systems. It functions as a security assessment utility that scans environments for misconfigurations, sensitive files, and insecure permissions to uncover paths for unauthorized privilege elevation. The project distinguishes itself through a modular script-based enumeration engine that adapts to the target environment. It utilizes environment-aware capability detection and cross-platform shell abstraction to normalize data collection across diverse operating systems, while operati
PEASS-ng provides automated enumeration scripts for both Windows and Linux to discover privilege escalation vectors, making it a definitive collection for system auditing and post-exploitation.
C#Privilege Escalation Tools - powershellmafia/powersploit
PowerShellMafia/PowerSploit
12,880View on GitHubPowerSploit is a collection of PowerShell modules designed for security assessment, penetration testing, and red team operations. It provides a framework for auditing Windows system configurations and evaluating the effectiveness of security defenses within an enterprise environment. The framework focuses on techniques that leverage native system administration tools and scripting environments to perform operations. It includes capabilities for executing arbitrary commands, escalating user privileges, and maintaining system persistence through event subscriptions. By utilizing in-memory execu
PowerSploit is a well-known collection of post-exploitation PowerShell modules that provides enumeration and privilege escalation scripts tailored specifically for Windows and Active Directory environments.
PowerShellActive Directory ExploitationActive Directory ToolsWindows Post Exploitation - swisskyrepo/payloadsallthethings
swisskyrepo/PayloadsAllTheThings
78,434View on GitHubThis project is a comprehensive, community-sourced knowledge base designed for security professionals and researchers. It functions as a centralized repository of offensive security techniques, providing a structured collection of exploit payloads, attack vectors, and methodologies for conducting vulnerability assessments and penetration testing. The repository distinguishes itself through a cross-platform payload taxonomy that categorizes exploitation methods by vulnerability type and target environment, enabling rapid lookup during security assessments. It maintains high standards of data i
This repository serves as a comprehensive knowledge base and collection of payloads, enumeration techniques, and exploitation methodologies covering Windows, Linux, Active Directory, and container environments, directly matching the security research needs of the search.
PythonSystem Escape Techniques - carlospolop/privilege-escalation-awesome-scripts-suite
carlospolop/privilege-escalation-awesome-scripts-suite
20,003View on GitHubThis project is a post-exploitation framework and privilege escalation script suite designed to scan local system configurations for security gaps. It serves as a system enumeration toolset used to identify paths for gaining higher administrative privileges on a target host. The suite incorporates capabilities for security penetration testing and vulnerability assessment reporting. It uses shell-based system enumeration and pattern-based vulnerability matching to detect misconfigurations, while employing heuristic-based permission analysis to evaluate system flags. Findings are gathered thro
This project is a privilege escalation and system enumeration script suite designed to scan for misconfigurations and security gaps, which directly addresses the visitor's need for local enumeration tools despite missing specific Active Directory and container escape modules.
C#Privilege EscalationPrivilege Escalation Tools - sleventyeleven/linuxprivchecker
sleventyeleven/linuxprivchecker
1,808View on GitHublinuxprivchecker.py -- a Linux Privilege Escalation Check Script
This repository provides a Linux privilege escalation check script designed for auditing and enumeration, fitting the collection well despite focusing exclusively on Linux rather than covering all operating systems or Active Directory.
PythonPrivilege Escalation - belane/linux-soft-exploit-suggester
belane/linux-soft-exploit-suggester
Search Exploitable Software on Linux
This repository provides a Linux software exploit suggester tool that helps identify privilege escalation vectors through local enumeration, fitting the core focus on Linux system security research and enumeration.
PythonPrivilege Escalation - mubix/post-exploitation
mubix/post-exploitation
1,582View on GitHubPost Exploitation Collection
This repository provides a curated collection of post-exploitation tools, scripts, and techniques for both Windows and Linux environments, though it lacks dedicated container escape features and Active Directory exploitation resources.
CWindows Post Exploitation - rebootuser/linenum
rebootuser/LinEnum
7,835View on GitHubLinEnum is a suite of security utilities for auditing Linux systems, scanning for privilege escalation paths, and enumerating local vulnerabilities. It functions as a system security audit tool, a local enumeration utility, and a scanner for identifying misconfigurations that could allow a user to gain root access. The project includes specialized auditing for containerized environments, specifically detecting Docker and LXC signatures to identify potential escape vectors to the host system. Its broader capabilities cover the analysis of kernel versions, the identification of SUID binaries a
LinEnum is a specialised Linux enumeration script focused on discovering local privilege escalation paths and container escape vectors, which fits part of the requested security collection.
ShellContainer Escape AnalysisPrivilege EscalationContainer Escape Auditors - gtfobins/gtfobins.github.io
GTFOBins/GTFOBins.github.io
12,669View on GitHubGTFOBins is a curated knowledge base documenting security-related techniques for Unix-based system binaries. It serves as a reference for offensive security research, detailing how standard, pre-installed system utilities can be repurposed to facilitate privilege escalation, restricted environment escapes, and post-exploitation workflows. The project distinguishes itself by cataloging insecure execution paths and misconfigured permissions inherent in common system tools. By identifying legitimate binary functions that can be leveraged to bypass security controls, the repository provides a str
GTFOBins is a curated reference for Linux privilege escalation and Unix-based security research, making it a valuable tool for discovering binary bypasses despite lacking Windows and Active Directory coverage.
YAMLPrivilege Escalation Tools - ghostpack/seatbelt
GhostPack/Seatbelt
4,619View on GitHubSeatbelt is a C# offensive security framework and host security auditor designed to perform endpoint surveys on Windows systems. It functions as a modular tool for identifying vulnerabilities, misconfigurations, and security-relevant artifacts on both local and remote hosts. The project distinguishes itself through a module-based check system that allows for the integration of custom security command units. It features a security event log parser to track logon and process activity, alongside a credential extraction utility for gathering browser history, saved passwords, and cloud credentials
Seatbelt is a specialized C# offensive security framework focused on Windows enumeration and local security auditing, making it a valuable building block for Windows privilege escalation research despite lacking Linux or container escape capabilities.
C#Privilege EscalationActive Directory Assessment - liamg/traitor
liamg/traitor
7,144View on GitHubTraitor is a Linux privilege escalation framework and automated root exploit suite. It provides specialized utilities for scanning system misconfigurations and deploying automated exploit scripts on local Linux hosts to elevate user privileges to the root level. The tool identifies insecure system setups and binary vulnerabilities, such as GTFOBins, to map potential routes for gaining root access. It automates the process of discovering and exploiting these local vulnerabilities through targeted exploit execution and the deployment of sequential scripts. The system covers vulnerability asses
Traitor is a Linux privilege escalation framework and automated root exploit suite that handles enumeration and exploitation for Linux, though it focuses exclusively on Linux rather than offering a broader multi-platform collection.
GoPrivilege Escalation - carlospolop/peass-ng
carlospolop/PEASS-ng
20,054View on GitHubPEASS-ng is a Linux privilege escalation scanner and post-exploitation enumeration tool. It identifies security vulnerabilities and misconfigurations on Linux systems that could lead to unauthorized elevated access. The tool functions as a security audit utility that discovers system weaknesses and sensitive information after initial access is gained. It scans operating systems to identify specific privilege escalation paths. Findings are converted into structured security audit reports. The tool supports exporting scan results into JSON, HTML, and PDF formats for formal analysis and documen
PEASS-ng is an established post-exploitation enumeration and privilege escalation tool focused on discovering system misconfigurations, though the provided description emphasizes Linux while leaving out Windows and Active Directory features.
C#Privilege Escalation - mzet-/linux-exploit-suggester
mzet-/linux-exploit-suggester
6,528View on GitHublinux-exploit-suggester is a diagnostic utility and vulnerability scanner designed to identify potential kernel exploits on Linux systems. It functions as a privilege escalation auditor by matching system information and kernel versions against a database of known security flaws. The tool differentiates itself by filtering and ranking exploits based on specific system properties and runtime security configurations. It evaluates kernel hardening settings, such as memory protection mechanisms, to discard inapplicable exploits and prioritize candidates by their probability of success. The softw
This utility identifies Linux kernel vulnerabilities to assist with privilege escalation audits, fitting the requested security research domain well despite focusing primarily on Linux environments.
ShellPrivilege Escalation - lolbas-project/lolbas
LOLBAS-Project/LOLBAS
8,323View on GitHubLOLBAS is a curated database and knowledge base of signed Windows binaries that can be misused to bypass security restrictions and execute unauthorized code. It serves as a technical registry that maps trusted system files to their functional capabilities and the offensive tactics they enable. The project distinguishes itself by providing a capability-driven indexing system and a tactics registry that relates legitimate binary functionality to known security evasion techniques. It includes an association layer that links specific system binaries to attack patterns and tactical objectives, pro
This project provides a curated database of signed Windows binaries that can be misused for code execution and security bypasses, fitting the operating system exploitation domain while focusing specifically on Living-off-the-Land binaries rather than a broad exploit collection.
XSLTUAC Bypasses - rapid7/metasploit-framework
rapid7/metasploit-framework
38,415View on GitHubThe framework is a comprehensive penetration testing platform designed for the development, testing, and execution of security exploits. It serves as a research toolkit and automated assessment environment, enabling security professionals to identify and validate vulnerabilities within networked systems and infrastructure through repeatable, standardized procedures. The platform distinguishes itself through a modular architecture that supports reflective payload injection, allowing for the execution of code directly in memory without writing to disk. It utilizes an asynchronous event loop to
Metasploit is a comprehensive penetration testing and exploitation framework containing numerous modules for privilege escalation, enumeration, and post-exploitation across various operating systems, though it is structured as an interactive framework rather than a static collection of scripts.
RubyPenetration Testing PlatformsExploit FrameworksExploitation Frameworks - z4nzu/hackingtool
Z4nzu/hackingtool
77,515View on GitHubThis project is a comprehensive cybersecurity tool collection designed to support security research, penetration testing, and vulnerability assessment. It functions as a unified penetration testing suite, providing a centralized environment where professionals can access a wide range of offensive security utilities to identify system weaknesses and study attack vectors. The platform distinguishes itself through a modular architecture that aggregates disparate security scripts into a single, hierarchical command-line interface. It simplifies the management of these utilities by integrating ext
This repository provides a comprehensive collection of diverse cybersecurity tools and penetration testing utilities, though it is organized as a general-purpose hacking suite rather than a dedicated privilege escalation script repository.
PythonExploit FrameworksHash Cracking ToolsPenetration Testing Suites - sagishahar/lpeworkshop
sagishahar/lpeworkshop
2,091View on GitHubWindows / Linux Local Privilege Escalation Workshop
This repository provides a structured workshop for Windows and Linux local privilege escalation, acting as a training resource rather than a comprehensive exploit framework.
BatchfilePrivilege Escalation ToolsSecurity Training LabsSecurity Training Platforms - kabot/unix-privilege-escalation-exploits-pack
Kabot/Unix-Privilege-Escalation-Exploits-Pack
Exploits for getting local root on Linux, BSD, AIX, HP-UX, Solaris, RHEL, SUSE etc.
This repository provides a collection of local privilege escalation exploits for Unix and Linux systems, fulfilling a core part of the search even though it focuses strictly on Unix-like operating systems rather than Windows or Active Directory.
CExploit CollectionsVulnerability Exploits - gdssecurity/windows-exploit-suggester
GDSSecurity/Windows-Exploit-Suggester
4,209View on GitHubWindows-Exploit-Suggester is a security audit tool designed to scan Windows systems for outdated components and missing security patches. It functions as a vulnerability scanner that compares target patch levels against official vendor security bulletins to identify security gaps. The tool specializes in exploit mapping, linking identified missing updates to known public exploit code and available penetration testing modules. It automates the research process by cross-referencing missing patches with specific vulnerability identifiers to determine applicable attack vectors. The system includ
Windows-Exploit-Suggester is a specialized privilege escalation and patch auditing tool for Windows environments, though it focuses primarily on vulnerability matching rather than encompassing Linux or Active Directory vectors.
PythonWindows Vulnerability AssessmentsAutomated Exploit CollectorsExploit Mapping - the-z-labs/linux-exploit-suggester
The-Z-Labs/linux-exploit-suggester
6,532View on GitHubThis project is a security auditing tool and vulnerability scanner designed to evaluate the security posture of Linux hosts. It functions as a privilege escalation auditor that scans running kernels for missing security patches and vulnerabilities to identify potential paths for gaining root access. The utility performs kernel security analysis by matching system version strings against a database of known exploits. It audits kernel hardening settings and evaluates system exposure to categorize the probability of successful privilege escalation attacks. The tool covers a broad range of asses
This repository provides a Linux privilege escalation auditing and enumeration tool that matches kernel versions against known exploits, aligning well with the core search intent despite focusing primarily on Linux hosts rather than a multi-platform collection.
ShellLinux EnumerationKernel Security AnalysisKernel Version Matching - berdav/cve-2021-4034
berdav/CVE-2021-4034
2,040View on GitHubCVE-2021-4034 1day
This repository provides a proof-of-concept exploit for a specific privilege escalation vulnerability rather than a comprehensive collection, but it squarely belongs to the requested security domain.
CExploit DevelopmentPrivilege Escalation Tools - 1n3/privesc
1N3/PrivEsc
This repository is a curated collection of Linux, Windows, and MySQL privilege escalation scripts and exploits, directly addressing the core need for OS-level pentesting tools, though it lacks specific Active Directory and container escape scripts.
Cbugbountyexploitshacking - rhinosecuritylabs/security-research
RhinoSecurityLabs/Security-Research
1,101View on GitHubThis repository provides a collection of custom exploits and security research from a professional firm, though it lacks the broad coverage of automated enumeration scripts for standard privilege escalation found in dedicated frameworks.
Python
Compare the top 10 at a glance
| Repository | Stars | Language | License | Last push |
|---|---|---|---|---|
| diego-treitos/linux-smart-enumeration | 3.9K | Shell | GPL-3.0 | |
| ghostpack/certify | 2K | C# | NOASSERTION | |