Proton Framework is a Windows post-exploitation framework similar to other Windows post-exploitation frameworks. The major difference is that the Proton Framework does most of its operations using Windows Script Host, with compatibility in the core to support a default installation of Windows 2000 with no service packs all the way through Windows 10.

✭ 142

python windows hacking hacking-tool kali-linux registry remote-control payload backdoor rat post-exploitation metasploit privilege-escalation exploitation-framework

Awesome Hacking Resources

A collection of hacking / penetration testing resources to make you better!

✭ 11,466

hacking reverse-engineering penetration-testing exploit malware ctf owasp mitm privilege-escalation buffer-overflow windows-privilege-escalation privilege-escalation-linux

Linux Smart Enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

✭ 1,956

shell hacking pentesting oscp privilege-escalation ctfs privesc hackthebox linux-enumeration

Pytmipe

Python library and client for token manipulations and impersonations for privilege escalation on Windows

✭ 104

python python3 windows token privilege-escalation

Active Directory Exploitation Cheat Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

✭ 1,392

security windows hacking pentesting penetration-testing cheatsheet hacking-tool exploitation enumeration attack active-directory cheat privilege-escalation activedirectory

Delete2system

Weaponizing for Arbitrary Files/Directories Delete bugs to Get NT AUTHORITY\SYSTEM

✭ 95

c privilege-escalation

Winpwn

Automation for internal Windows Penetrationtest / AD-Security

✭ 1,303

powershell automation pentesting pentest-tool redteam exploitation recon privilege-escalation

Juicy Potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

✭ 1,276

windows privilege-escalation

Phpsploit

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

✭ 1,188

python hacking redteam persistence backdoor post-exploitation privilege-escalation webshell

Kernel Exploits

My proof-of-concept exploits for the Linux kernel

✭ 1,173

c exploit linux-kernel privilege-escalation

Gtfonow

Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries

✭ 68

python linux pentesting unix ctf post-exploitation bypass privilege-escalation sudo

Sudo killer

A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo for linux privilege escalation.

✭ 1,073

shell pentest ctf pentest-tool cve exploits oscp privilege-escalation sudo

Privesccheck

Privilege Escalation Enumeration Script for Windows

✭ 1,032

powershell windows pentesting pentest-tool privilege-escalation

Odat

ODAT: Oracle Database Attacking Tool

✭ 906

python pentest pentest-tool privilege-escalation oracle-database

Active Directory Exploitation Cheat Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

✭ 870

powershell security windows hacking pentesting penetration-testing infosec cheatsheet hacking-tool exploitation enumeration active-directory privilege-escalation

Oscp

Collection of things made during my OSCP journey

✭ 709

python c bash exploit scripts oscp privilege-escalation

Msdat

MSDAT: Microsoft SQL Database Attacking Tool

✭ 621

python pentest pentest-tool privilege-escalation

Payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Dirty sock

Linux privilege escalation exploit via snapd (CVE-2019-7304)

✭ 533

python linux security privilege-escalation

Wadcoms.github.io

WADComs is an interactive cheat sheet, containing a curated list of Unix/Windows offensive tools and their respective commands.

✭ 431

html windows cheatsheet redteam exploitation persistence enumeration privilege-escalation blueteam

0xsp Mongoose

a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and privilege escalations attacks, replicate the tactics and techniques of an advanced adversary in a network.

✭ 419

pascal windows security-tools mongoose security-audit redteam toolkit agent webapi privilege-escalation

Roothelper

A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.

✭ 416

shell bash shellscript linux enumeration exploits privilege-escalation root

Torat

ToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication

✭ 415

go golang linux windows cross-platform rpc tor persistence payload rat post-exploitation keylogger reverse-shell privilege-escalation transport

Awesome Privilege Escalation

A curated list of awesome privilege escalation

✭ 413

docker awesome awesome-list hacking pentesting pentest ctf oscp privilege-escalation nfs

A Red Teamer Diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

✭ 382

script hacking security-tools pentesting tools penetration-testing exploit cybersecurity vulnerability redteam enumeration nmap active-directory metasploit privilege-escalation meterpreter

Infosec reference

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

K8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

✭ 4,173

powershell python ASP.NET go c VBScript database hacking scanner exploit pentest password poc brute-force bypass privilege-escalation apt crack 0day getshell netscan

Badpotato

Windows 权限提升 BadPotato

✭ 361

privilege-escalation

Suid3num

A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)

✭ 342

python pentesting pentest exploitation oscp privilege-escalation

Linux Kernel Exploitation

A collection of links related to Linux kernel security and exploitation

✭ 3,859

security exploit linux-kernel privilege-escalation kernel-exploitation

Awesome Windows Red Team

A curated list of awesome Windows frameworks, libraries, software and resources for Red Teams

✭ 308

powershell windows awesome awesome-list pentest phishing privilege-escalation evasion

Traitor

⬆️ ☠️ Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, polkit, docker socket

✭ 3,473

go Makefile security-tools exploit infosec privilege-escalation privesc hackthebox gtfobins redteam-tools cve-2021-3560

Uptux

Linux privilege escalation checks (systemd, dbus, socket fun, etc)

✭ 260

python hacking pentesting privilege-escalation

Writeups

This repository contains writeups for various CTFs I've participated in (Including Hack The Box).

gtfo

Search for Unix binaries that can be exploited to bypass system security restrictions.

✭ 88

python linux reverse-shell binary post-exploitation bypass privilege-escalation exfiltration blueteam gtfo security-tools oscp redteam bind-shell gtfobins unix-binaries

suider

This tool will quickly search for exploitable binaries with SUID bit set in Linux and will output the method of exploitation from GTFObins

✭ 21

shell linux privilege-escalation penetration-testing-tools suid-binaries

moonwalk

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps. 👻🐚

✭ 544

rust linux security exploit infosec cve exploitation privilege-escalation security-tools redteam red-teaming redteam-tools infosectools

SharpLink

Create file system symbolic links from low privileged user accounts within PowerShell

✭ 51

C#windows symbolic-links symlink symlinks privilege-escalation junction object-manager registry-links

go-escalate

The goal is to provide an easy to use API to escalate privileges on Linux, Windows and Mac OS

✭ 23

go privilege-escalation uac-bypass privilege-elevation privilege-escalation-exploits

Clippy

Terribad PrivEsc enumeration script for Windows systems

✭ 15

python windows enumeration privilege-escalation

exploit

Collection of different exploits

✭ 153

python c C#HTML shell Makefile windows linux debugging security exploit hacking dev exploits privilege-escalation

byeintegrity5-uac

Bypass UAC at any level by abusing the Task Scheduler and environment variables

✭ 21

C++windows attack privilege-escalation bypass-uac privilege-escalation-exploits

Linux-Kernel-Exploitation

Linux kernel development & exploitation lab.

✭ 130

c shell Makefile linux security kernel linux-kernel pwn ctf pwnable kernel-exploitation privilege-escalation

adduser-dll

Simple DLL that add a user to the local Administrators group

✭ 48

C++c backdoor dll privilege-escalation redteam

Pentest-Service-Enumeration

Suggests programs to run against services found during the enumeration phase of a Pentest

✭ 80

shell pentest privilege-escalation oscp privilege-escalation-linux oscp-tools enumeration-phase pentest-service-enumeration

Lucifer

A Powerful Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation, Enumeration, Exfiltration and More... Use Or Build Automation Modules To Speed Up Your Cyber Security Life