xairy / linux-kernel-exploitation
A collection of links related to Linux kernel security and exploitation
xairy / linux-kernel-exploitation
The-Z-Labs / linux-exploit-suggester
Linux privilege escalation auditing tool
itm4n / PrivescCheck
Privilege Escalation Enumeration Script for Windows
ADScanPro / adscan
Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.
Frissi0n / GTFONow
Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.
Ignitetechnologies / Windows-Privilege-Escalation
—
Noz2 / RootHound
Map your path from a low-priv user to roo, like BloodHound, for local Linux privesc.
ricardojoserf / CrystalPotato
Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscation. Run commands, reverse shells or add users
ZeroDayEvil / CVE-2026-54121-Certighost
🛡 Official AI Security Tool module for CVE-2026-54121 (Certighost): AD CS certificate abuse deep-dive, defensive audit workflows, and safe in-app console execution for authorized Active Directory security testing.
scottalt / senior-securityengineer-cybersecuritybookmarks
A senior security engineer's actual browser bookmarks. 40+ curated cybersecurity resources for recon, OSINT, exploitation, privilege escalation, and malware analysis.
ZeroDayEvil / CVE-2026-20817
🛡️ Official AI Security Tool module for CVE-2026-20817 (Windows Error Reporting WER ALPC Local Privilege Escalation PoC).
SyntaxMethod / CVE-2026-42978-PoC-Research
CVE-2026-42978 Windows Push Notifications (WpnService) Use-After-Free & Race Condition PoC research, diagnostic scanner, and security audit module for AI Security Tool.
chris-ritsen / samsung-tv-root
Samsung QN90B and QN90F root
nbs32k / LocalStranger
PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.
armourinfosec / Offensive-Windows-Privilege-Escalation
Offensive Windows Privilege Escalation — hands-on study notes: enumeration & methodology, service/scheduled-task misconfigs, UAC bypass, token-privilege abuse, the potato family, kernel exploits, and credential mining. Each technique with detection & defenses. CC BY 4.0.
armourinfosec / Offensive-Linux-Privilege-Escalation
Offensive Linux Privilege Escalation — hands-on study notes: enumeration, sudo/SUID/capabilities, cron & systemd timers, kernel LPEs (DirtyPipe/OverlayFS/PwnKit), container & namespace escapes, and credential mining. Each technique with detection & defenses. CC BY 4.0.
yousafkhamza / iam-visualizer
Paste an AWS IAM policy, see exactly what it grants — and get plain-English findings for wildcards, missing `Condition` blocks, and privilege-escalation paths like unconditioned `iam:PassRole`.