awesome-privilege-escalation
linux-smart-enumeration
| awesome-privilege-escalation | linux-smart-enumeration | |
|---|---|---|
| 2 | 2 | |
| 1,114 | 3,193 | |
| - | - | |
| 5.6 | 6.2 | |
| about 2 months ago | 4 months ago | |
| Shell | ||
| - | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
awesome-privilege-escalation
linux-smart-enumeration
-
I passed with 100 points on second attempt AMA
Linux privesc is a bunch of manual checks from my notes that I have built over time. I also like https://github.com/diego-treitos/linux-smart-enumeration (lse.sh) which is similar to linpeas but the output is less busy.
- diego-treitos/linux-smart-enumeration - Linux enumeration tool for pentesting and CTFs with verbosity levels
What are some alternatives?
Captcha-Bypassing-Lab - PHP lab to test captcha bypassing
airgeddon - This is a multi-use bash script for Linux systems to audit wireless networks.
offensive-docker - Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.
owasp-mastg - The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
kashz-jewels - Gitbook: kashz-Jewels
SUDO_KILLER - A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.
HijackLibs - Project for tracking publicly disclosed DLL Hijacking opportunities.
CapProcess - A simple and useful script for capturing the processes running on a machine and some basic information about the system
PayloadsAllTheThings - A list of useful payloads and bypass for Web Application Security and Pentest/CTF
pdfcrack - An Advanced tool to Crack Any Password Protected PDF file. A very user friendly script especially for noob hackers.
post-exploitation - Post Exploitation Collection
ActiveDirectoryAttackTool - ADAT is a small tool used to assist CTF players and Penetration testers with easy commands to run against an Active Directory Domain Controller. This tool is is best utilized using a set of known credentials against the host.