privilage-escalation

Linux post exploitation privilege escalation enumeration

WorldFirst (Public) Docker API Exploit - My security researches involving Docker and Openshift

Full Weaponized LPE Toolkit 2026

Lemon is a User Interactive bash program to search for privilege escalation vectors on Linux in an automated fashion

AfterLogic Products Vulnerabilities

This script search for the bin on the https://gtfobins.github.io/ for the SUID exploit and returns the bins that have exploit available on gtfobins. So you don't need to manually search for every file on the site.

Hands-on exploitation of the VSFTPD 2.3.4 backdoor vulnerability using Metasploit to gain shell access, create users, modify logs, and attempt privilege escalation in a secure lab environment.

CURLOPTIX - curl-powered cybersecurity assessment framework with 300+ defensive & offensive commands. Detects vulnerabilities, sensitive data exposure, SSL/TLS issues, and security misconfigurations. Features scrollable UI, 60+ detection patterns, and comprehensive reporting.

"Automated privilege escalation monitoring and alerting system"

A lightweight, automated local enumeration tool written in Go designed to audit Linux systems for potential privilege escalation vectors, misconfigurations, and sensitive data exposure.

Structured Hack The Box writeups focused on methodology, enumeration, exploitation, privilege escalation, and lessons learned.

An Active Directory pentest against a vulnerable Windows Server 2019 domain. Chained AS-REP roasting and Kerberoasting into a full domain hash dump and Domain Admin compromise, using BloodHound to map the privilege escalation path, documented with a CVSS scored findings report.

Beewolf is a PowerShell script that exploits HiveNightmare/SeriousSAM

Implementation of a Security Operations Center (SOC) lab using Ubuntu Server, Splunk Enterprise, FTP, SSH, Nmap, and Linux privilege escalation.

Graph-based cyber attack propagation and blast radius simulator for enterprise environments. Models lateral movement, privilege escalation, and remediation impact using attack graphs.

My notes from TryHackMe's Junior Penetration Tester path. Covers web hacking fundamentals like SQL injection, XSS, IDOR and SSRF, plus Burp Suite, network reconnaissance with Nmap, Metasploit, and privilege escalation on Linux and Windows.

Basic linux enum script

Information Security

Herramienta de post-explotación en Bash para auditorías de elevación de privilegios. Automatiza ataques de fuerza bruta local contra el comando su con gestión de timeouts y feedback dinámico en terminal.