# Results for "privilege escalation exploits"

> AI-ranked search results for `privilege escalation exploits` on awesome-repositories.com — ordered by an LLM for relevance, best match first. 117 total matches; showing the top 24.

Explore on the web: https://awesome-repositories.com/q/privilege-escalation-exploits

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [this search on awesome-repositories.com](https://awesome-repositories.com/q/privilege-escalation-exploits).**

## Results

- [diego-treitos/linux-smart-enumeration](https://awesome-repositories.com/repository/diego-treitos-linux-smart-enumeration.md) (3,932 ⭐) — This project is a comprehensive toolkit for Linux security auditing and system enumeration. It functions as a framework for identifying configuration weaknesses, gathering system information, and detecting vulnerabilities to assist in gaining higher administrative access levels on Linux systems.

The toolkit includes specialized capabilities for version-based vulnerability scanning, which matches installed software against known affected releases, and time-window process monitoring to track recurring system patterns and periodic tasks. It also provides infrastructure for hosting and delivering
- [ghostpack/certify](https://awesome-repositories.com/repository/ghostpack-certify.md) (1,994 ⭐) — Certify is a C# tool to enumerate and abuse misconfigurations in Active Directory Certificate Services (AD CS).
- [ly4k/certipy](https://awesome-repositories.com/repository/ly4k-certipy.md) (3,562 ⭐) — Tool for Active Directory Certificate Services enumeration and abuse
- [peass-ng/peass-ng](https://awesome-repositories.com/repository/peass-ng-peass-ng.md) (19,337 ⭐) — PEASS-ng is an automated penetration testing framework designed to identify privilege escalation vectors on local systems. It functions as a security assessment utility that scans environments for misconfigurations, sensitive files, and insecure permissions to uncover paths for unauthorized privilege elevation.

The project distinguishes itself through a modular script-based enumeration engine that adapts to the target environment. It utilizes environment-aware capability detection and cross-platform shell abstraction to normalize data collection across diverse operating systems, while operati
- [powershellmafia/powersploit](https://awesome-repositories.com/repository/powershellmafia-powersploit.md) (12,880 ⭐) — PowerSploit is a collection of PowerShell modules designed for security assessment, penetration testing, and red team operations. It provides a framework for auditing Windows system configurations and evaluating the effectiveness of security defenses within an enterprise environment.

The framework focuses on techniques that leverage native system administration tools and scripting environments to perform operations. It includes capabilities for executing arbitrary commands, escalating user privileges, and maintaining system persistence through event subscriptions. By utilizing in-memory execu
- [swisskyrepo/payloadsallthethings](https://awesome-repositories.com/repository/swisskyrepo-payloadsallthethings.md) (78,434 ⭐) — This project is a comprehensive, community-sourced knowledge base designed for security professionals and researchers. It functions as a centralized repository of offensive security techniques, providing a structured collection of exploit payloads, attack vectors, and methodologies for conducting vulnerability assessments and penetration testing.

The repository distinguishes itself through a cross-platform payload taxonomy that categorizes exploitation methods by vulnerability type and target environment, enabling rapid lookup during security assessments. It maintains high standards of data i
- [carlospolop/privilege-escalation-awesome-scripts-suite](https://awesome-repositories.com/repository/carlospolop-privilege-escalation-awesome-scripts-suite.md) (20,003 ⭐) — This project is a post-exploitation framework and privilege escalation script suite designed to scan local system configurations for security gaps. It serves as a system enumeration toolset used to identify paths for gaining higher administrative privileges on a target host.

The suite incorporates capabilities for security penetration testing and vulnerability assessment reporting. It uses shell-based system enumeration and pattern-based vulnerability matching to detect misconfigurations, while employing heuristic-based permission analysis to evaluate system flags.

Findings are gathered thro
- [sleventyeleven/linuxprivchecker](https://awesome-repositories.com/repository/sleventyeleven-linuxprivchecker.md) (1,808 ⭐) — linuxprivchecker.py -- a Linux Privilege Escalation Check Script
- [belane/linux-soft-exploit-suggester](https://awesome-repositories.com/repository/belane-linux-soft-exploit-suggester.md) (236 ⭐) — Search Exploitable Software on Linux
- [mubix/post-exploitation](https://awesome-repositories.com/repository/mubix-post-exploitation.md) (1,582 ⭐) — Post Exploitation Collection
- [rebootuser/linenum](https://awesome-repositories.com/repository/rebootuser-linenum.md) (7,835 ⭐) — LinEnum is a suite of security utilities for auditing Linux systems, scanning for privilege escalation paths, and enumerating local vulnerabilities. It functions as a system security audit tool, a local enumeration utility, and a scanner for identifying misconfigurations that could allow a user to gain root access.

The project includes specialized auditing for containerized environments, specifically detecting Docker and LXC signatures to identify potential escape vectors to the host system.

Its broader capabilities cover the analysis of kernel versions, the identification of SUID binaries a
- [gtfobins/gtfobins.github.io](https://awesome-repositories.com/repository/gtfobins-gtfobins-github-io.md) (12,669 ⭐) — GTFOBins is a curated knowledge base documenting security-related techniques for Unix-based system binaries. It serves as a reference for offensive security research, detailing how standard, pre-installed system utilities can be repurposed to facilitate privilege escalation, restricted environment escapes, and post-exploitation workflows.

The project distinguishes itself by cataloging insecure execution paths and misconfigured permissions inherent in common system tools. By identifying legitimate binary functions that can be leveraged to bypass security controls, the repository provides a str
- [ghostpack/seatbelt](https://awesome-repositories.com/repository/ghostpack-seatbelt.md) (4,619 ⭐) — Seatbelt is a C# offensive security framework and host security auditor designed to perform endpoint surveys on Windows systems. It functions as a modular tool for identifying vulnerabilities, misconfigurations, and security-relevant artifacts on both local and remote hosts.

The project distinguishes itself through a module-based check system that allows for the integration of custom security command units. It features a security event log parser to track logon and process activity, alongside a credential extraction utility for gathering browser history, saved passwords, and cloud credentials
- [liamg/traitor](https://awesome-repositories.com/repository/liamg-traitor.md) (7,144 ⭐) — Traitor is a Linux privilege escalation framework and automated root exploit suite. It provides specialized utilities for scanning system misconfigurations and deploying automated exploit scripts on local Linux hosts to elevate user privileges to the root level.

The tool identifies insecure system setups and binary vulnerabilities, such as GTFOBins, to map potential routes for gaining root access. It automates the process of discovering and exploiting these local vulnerabilities through targeted exploit execution and the deployment of sequential scripts.

The system covers vulnerability asses
- [carlospolop/peass-ng](https://awesome-repositories.com/repository/carlospolop-peass-ng.md) (20,054 ⭐) — PEASS-ng is a Linux privilege escalation scanner and post-exploitation enumeration tool. It identifies security vulnerabilities and misconfigurations on Linux systems that could lead to unauthorized elevated access.

The tool functions as a security audit utility that discovers system weaknesses and sensitive information after initial access is gained. It scans operating systems to identify specific privilege escalation paths.

Findings are converted into structured security audit reports. The tool supports exporting scan results into JSON, HTML, and PDF formats for formal analysis and documen
- [mzet-/linux-exploit-suggester](https://awesome-repositories.com/repository/mzet-linux-exploit-suggester.md) (6,528 ⭐) — linux-exploit-suggester is a diagnostic utility and vulnerability scanner designed to identify potential kernel exploits on Linux systems. It functions as a privilege escalation auditor by matching system information and kernel versions against a database of known security flaws.

The tool differentiates itself by filtering and ranking exploits based on specific system properties and runtime security configurations. It evaluates kernel hardening settings, such as memory protection mechanisms, to discard inapplicable exploits and prioritize candidates by their probability of success.

The softw
- [lolbas-project/lolbas](https://awesome-repositories.com/repository/lolbas-project-lolbas.md) (8,323 ⭐) — LOLBAS is a curated database and knowledge base of signed Windows binaries that can be misused to bypass security restrictions and execute unauthorized code. It serves as a technical registry that maps trusted system files to their functional capabilities and the offensive tactics they enable.

The project distinguishes itself by providing a capability-driven indexing system and a tactics registry that relates legitimate binary functionality to known security evasion techniques. It includes an association layer that links specific system binaries to attack patterns and tactical objectives, pro
- [rapid7/metasploit-framework](https://awesome-repositories.com/repository/rapid7-metasploit-framework.md) (38,415 ⭐) — The framework is a comprehensive penetration testing platform designed for the development, testing, and execution of security exploits. It serves as a research toolkit and automated assessment environment, enabling security professionals to identify and validate vulnerabilities within networked systems and infrastructure through repeatable, standardized procedures.

The platform distinguishes itself through a modular architecture that supports reflective payload injection, allowing for the execution of code directly in memory without writing to disk. It utilizes an asynchronous event loop to
- [z4nzu/hackingtool](https://awesome-repositories.com/repository/z4nzu-hackingtool.md) (77,515 ⭐) — This project is a comprehensive cybersecurity tool collection designed to support security research, penetration testing, and vulnerability assessment. It functions as a unified penetration testing suite, providing a centralized environment where professionals can access a wide range of offensive security utilities to identify system weaknesses and study attack vectors.

The platform distinguishes itself through a modular architecture that aggregates disparate security scripts into a single, hierarchical command-line interface. It simplifies the management of these utilities by integrating ext
- [sagishahar/lpeworkshop](https://awesome-repositories.com/repository/sagishahar-lpeworkshop.md) (2,091 ⭐) — Windows / Linux Local Privilege Escalation Workshop
- [kabot/unix-privilege-escalation-exploits-pack](https://awesome-repositories.com/repository/kabot-unix-privilege-escalation-exploits-pack.md) (821 ⭐) — Exploits for getting local root on Linux, BSD, AIX, HP-UX, Solaris, RHEL, SUSE etc.
- [gdssecurity/windows-exploit-suggester](https://awesome-repositories.com/repository/gdssecurity-windows-exploit-suggester.md) (4,209 ⭐) — Windows-Exploit-Suggester is a security audit tool designed to scan Windows systems for outdated components and missing security patches. It functions as a vulnerability scanner that compares target patch levels against official vendor security bulletins to identify security gaps.

The tool specializes in exploit mapping, linking identified missing updates to known public exploit code and available penetration testing modules. It automates the research process by cross-referencing missing patches with specific vulnerability identifiers to determine applicable attack vectors.

The system includ
- [the-z-labs/linux-exploit-suggester](https://awesome-repositories.com/repository/the-z-labs-linux-exploit-suggester.md) (6,532 ⭐) — This project is a security auditing tool and vulnerability scanner designed to evaluate the security posture of Linux hosts. It functions as a privilege escalation auditor that scans running kernels for missing security patches and vulnerabilities to identify potential paths for gaining root access.

The utility performs kernel security analysis by matching system version strings against a database of known exploits. It audits kernel hardening settings and evaluates system exposure to categorize the probability of successful privilege escalation attacks.

The tool covers a broad range of asses
- [berdav/cve-2021-4034](https://awesome-repositories.com/repository/berdav-cve-2021-4034.md) (2,040 ⭐) — CVE-2021-4034 1day