linux-smart-enumeration
OSCP-Priv-Esc
Our great sponsors
linux-smart-enumeration | OSCP-Priv-Esc | |
---|---|---|
2 | 3 | |
3,193 | 304 | |
- | - | |
6.2 | 10.0 | |
4 months ago | over 3 years ago | |
Shell | ||
GNU General Public License v3.0 only | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
linux-smart-enumeration
-
I passed with 100 points on second attempt AMA
Linux privesc is a bunch of manual checks from my notes that I have built over time. I also like https://github.com/diego-treitos/linux-smart-enumeration (lse.sh) which is similar to linpeas but the output is less busy.
- diego-treitos/linux-smart-enumeration - Linux enumeration tool for pentesting and CTFs with verbosity levels
OSCP-Priv-Esc
-
Recommendations for linux and windows manual priv esc enumeration cheat sheets?
Win & Linux PE: https://github.com/C0nd4/OSCP-Priv-Esc
- I passed with 100 points on second attempt AMA
- a goldmine mind map for active directory
What are some alternatives?
airgeddon - This is a multi-use bash script for Linux systems to audit wireless networks.
AutoRecon - AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
owasp-mastg - The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
Seatbelt - Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.
SUDO_KILLER - A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.
PrivescCheck - Privilege Escalation Enumeration Script for Windows
CapProcess - A simple and useful script for capturing the processes running on a machine and some basic information about the system
pspy - Monitor linux processes without root permissions
pdfcrack - An Advanced tool to Crack Any Password Protected PDF file. A very user friendly script especially for noob hackers.
PEASS-ng - PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
ActiveDirectoryAttackTool - ADAT is a small tool used to assist CTF players and Penetration testers with easy commands to run against an Active Directory Domain Controller. This tool is is best utilized using a set of known credentials against the host.
PrivEsc-MindMap