I passed with 100 points on second attempt AMA

• PEASS-ng

  90 14,874 8.5 C#

  PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

  

Adding link to PEAS: https://github.com/carlospolop/PEASS-ng

• Priv2Admin

  7 1,734 1.2

  Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.

Other than that it was just practice, hacktricks, payload all the things, https://github.com/gtworek/Priv2Admin, and reading writeups even if I rooted a box to make see if there were other ways that it could have been done. Hopefully that helps!

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• AutoRecon

  18 4,796 5.0 Python

  AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

I used AutoRecon (thanks tibs) and PEAS for both linux and windows privesc. But again, the reason I failed the first time was because I relied to heavily on these tools. I really like the disclaimer on the autorecon github:

• linux-smart-enumeration

  2 3,184 6.2 Shell

  Linux enumeration tool for pentesting and CTFs with verbosity levels

Linux privesc is a bunch of manual checks from my notes that I have built over time. I also like https://github.com/diego-treitos/linux-smart-enumeration (lse.sh) which is similar to linpeas but the output is less busy.

• OSCP-Priv-Esc

  3 304 10.0

  Mind maps / flow charts to help with privilege escalation on the OSCP.

• PrivEsc-MindMap

  1 13 10.0

• pspy

  8 4,510 0.0 Go

  Monitor linux processes without root permissions

I also forgot https://github.com/DominicBreuker/pspy obviously for linux privesc

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• PrivescCheck

  4 2,603 8.4 PowerShell

  Privilege Escalation Enumeration Script for Windows

• Seatbelt

  8 3,474 6.1 C#

  Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

  

Suggest a related project