Standalone, daemon-less, unprivileged Dockerfile and OCI compatible container image builder.
- docker
- buildkit
- runc
- rootless
Repository Index
86,076 visible repositories in the index
25–48 of 81 · Most stars
Automation for internal Windows Penetrationtest / AD-Security
- pentesting
- automation
- adsecurity
- privilege-escalation
This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.
- oscp
- oscp-prep
- oscp-journey
- ctf
Generate an IAM policy from AWS, Azure, or Google Cloud (GCP) calls using client-side monitoring (CSM) or embedded proxy
:palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)
- exploits
- cve
- cve-2021-33739
- cve-2021-26868
Save or export your private and public Slack messages, threads, files, and users locally without admin privileges.
- slack
- archive
- dumper
- dump
A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.
- clsid
- dcom
- privilege-escalation
- windows
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
- active-directory
- active-directory-cheatsheet
- active-directory-exploitation
- penetration-testing
chroot, mount --bind, and binfmt_misc without privilege/setup for Linux
- chroot-environment
- userland-exec
- rootfs
- chroot
Privilege Escalation Project - Windows / Linux / Mac
Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.
Fully static, unprivileged, self-contained, containers as executable binaries.
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.
- sudo-exploitation
- abuse-sudo
- ctf
- exploits
Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.
BloodyAD is an Active Directory Privilege Escalation Framework
A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.
- authentication
- automatic
- call
- coerce
Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.
Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.
The lightweight Arch Linux based distro that runs, without root privileges, on top of any other Linux distro.
- sandbox
- arch-linux
- root-privileges
- linux-distros
IAM Least Privilege Policy Generator
Windows / Linux Local Privilege Escalation Workshop
Your data, your control. Fully open source, authentication and authorization. No lock-ins. Deployment in Railway in 120 seconds || Spin a docker image as a micro-service in your infra. Built in login page and Admin panel out of the box.
- hacktoberfest
- authentication
- auth
- authorization
This application gives Mac users in enterprise environments control over the administration of their machines by elevating their access level to administrator privileges on macOS. Users can set a timeframe in the application's settings to perform specific tasks, such as installing or uninstalling applications.
- open-source
- macos
- privileges