~/hackyfeed $

AirConnect is a tool that enables audio streaming to UPnP, Sonos, and Chromecast devices by adding AirPlay support, effectively allowing these players to appear as AirPlay devices on a local network. Its notable features include automatic detection of compatible audio players, the ability to create multiple virtual AirPlay devices, audio decoding and re-encoding options (ALAC, mp3, aac, flac), and compatibility across various operating systems. The tool facilitates playback from AirPlay clients like iPhones and iTunes, bridging them to non-AirPlay compatible speakers.

Apache AGE is an extension for PostgreSQL that integrates graph database capabilities into relational databases, enabling users to execute both ANSI SQL and openCypher queries on a unified platform. It supports complex graph queries and hybrid querying, making it suitable for applications like fraud detection and product recommendations, while retaining full PostgreSQL functionalities. Notable features include support for property indexes, hierarchical graph label organization, and the ability to query multiple graphs simultaneously.

AFLGo is an advanced fuzzing tool that extends American Fuzzy Lop (AFL) by enabling directed greybox fuzzing, specifically targeting predetermined code locations to effectively ascertain vulnerabilities. It is particularly useful for patch testing, verifying static analysis reports, detecting information flow issues, and reproducing crashes by generating specific inputs aimed at critical program paths. Notable features include focus on changed code inputs, enhanced efficiency in exploring sensitive data flows, and seamless integration into existing fuzzing frameworks like OSS-Fuzz.

The AFL (American Fuzzy Lop) tool is a powerful open-source fuzzer designed for security testing by automatically generating a vast array of test cases to identify vulnerabilities in software. Its primary use case lies in discovering bugs in binaries by utilizing genetic algorithms to evolve test cases based on code coverage analysis. Notable features include the ability to perform instrumented fuzzing, support for various file formats, and real-time feedback on code paths, enhancing the effectiveness of vulnerability discovery.

Yodo is a cybersecurity tool designed to exploit limited sudo permissions to escalate privileges on a Unix-like system, utilizing techniques such as the dirty COW exploit and the Pa(th)zuzu vulnerability check. It features additional checks for overwrite permissions on sudo commands, the examination of command history for privilege escalation opportunities, and the capability to replace commands with root privileges.

windows-lpe-lite is a local privilege escalation tool targeting Windows XP SP3 and later versions, enabling exploitation of specific CVEs (CVE-2014-4113, CVE-2015-1701, and CVE-2017-0213). Its primary use case is to grant elevated privileges on vulnerable Windows systems through the exploitation of kernel-mode vulnerabilities. Notable features include compatibility with various Windows builds and the ability to execute commands or spawn command prompts with elevated rights.

The rewolf-pcausa-exploit is a Windows local privilege escalation tool targeting the PCAUSA Rawether vulnerability. Its primary use case is to enable users to gain elevated permissions within a Windows environment, exploiting specific weaknesses in the PCAUSA driver. Notable features include its focus on local escalation and detailed documentation linked for further information.

This repository provides a local privilege escalation exploit for the Sudo vulnerability identified as CVE-2015-5602. It utilizes a flaw in the sudoedit functionality that allows a malicious user to exploit symlink attacks, enabling them to gain root access by modifying sensitive files. The tool includes a Docker setup for mimicking a vulnerable environment, along with an exploit script for demonstration purposes.

This tool demonstrates a local privilege escalation exploit for Sudo versions 1.6.x up to 1.6.9p21 and 1.7.x up to 1.7.2p4, specifically addressing the vulnerability in the sudoedit command that allows arbitrary command execution as the root user. The primary use case is to set up a vulnerable Docker environment for educational testing, enabling attackers to exploit the flaw and gain root access. Notable features include the provision of a simple Docker setup and a scripted exploit for demonstration purposes.

The "local-root-exploits" repository provides a curated collection of local privilege escalation exploits for Linux systems. Its primary use case is to facilitate security research and testing by demonstrating vulnerabilities that can be exploited to gain root access on local Linux environments. Notable features include organized categories of exploits for different Linux kernel versions and configurations.

WinSudo is a tool designed to execute commands with local system privileges on Windows. It allows users to create access tokens and processes while enabling various privileges and group configurations. Notable features include strict parameter checking to mitigate memory violations, the ability to inherit the current console window, and user-friendly LPCSTR submissions for user and group names.

Wconsole is a PowerShell-based tool designed for penetration testing on Windows systems, enabling comprehensive checks of OS versions, configurations, and security settings. It features functions for user enumeration, firewall status, process management, and various privilege escalation checks, making it a versatile hand-script for security testing. The tool can be executed locally or remotely, providing flexibility in assessment execution.

Uptux is a specialized tool for conducting privilege escalation checks on modern Linux systems, focusing on vulnerabilities in systemd units, D-Bus settings, and Unix socket files. Notable features include the ability to identify writable executables, broken symlinks, and overly permissive service configurations without requiring installation, making it convenient for use in restricted environments. The tool runs entirely from a single Python script and provides options for logging and debugging output.

UACHooker is a proof-of-concept reflective DLL designed to exploit the AicLaunchAdminProcess function in explorer.exe for privilege escalation by manipulating UAC prompts. It achieves this by redirecting user-initiated administrative commands to run a specified payload instead, masquerading it as legitimate software, while showing misleading arguments. The tool’s notable features include its ability to create indistinguishable UAC prompts for unsigned executables and the potential for future enhancements such as support for additional hooking libraries and broader target applications.

Suidsploit is a penetration testing tool designed to exploit 137 files with the Suid bit set, enabling attackers to potentially gain elevated privileges on a target system. Its primary use case includes obtaining a root shell, accessing sensitive files such as /etc/shadow, and establishing reverse shells. Notable features include the ability to download the tool via a simple HTTP server and its focus on user-friendly execution on both the attacker's and victim's machines.

SUIDer is a Linux script designed to streamline the privilege escalation process by identifying exploitable binaries with the SUID bit set. It leverages GTFObins to provide relevant exploitation methods and generates links for reference. Notably, it emphasizes caution, as some SUID binaries may require custom methods not covered by the provided resources.

SUD (Super User Do) is a lightweight UNIX tool designed for privilege escalation, enabling designated users in specific system groups (admin, wheel, sudo, or sud) to execute commands with root permissions without a password. It prioritizes simpler code and easier audits compared to traditional tools like sudo, while offering a public domain license and a literate programming approach for improved readability and maintainability. Notably, SUD features a minimalistic design with fewer dependencies and no configuration files, making it suitable for specific multi-user privilege isolation scenarios.

SharpLink is a C# library that enables users with low privileges to create file system and registry symbolic links on Windows systems in an object-oriented manner via PowerShell. It incorporates advanced techniques for symbolic link management, allows batch operations through LinkGroups, and provides robust functionalities for creating and removing both filesystem and registry links seamlessly. Notable features include the ability to handle multiple links collectively and the integration with PowerShell for enhanced usability.

Rust-Privesc is a collection of proof-of-concept (POC) tools designed to demonstrate User Account Control (UAC) bypass techniques implemented in Rust. It includes methods such as exploiting fake trusted directories and manipulating environment variables to execute command shell processes. Notable features include straightforward implementations of UAC bypass methods and the execution of `cmd.exe` as a default behavior.

RootHelper is a Linux privilege escalation tool that facilitates the exploitation process on compromised systems through an array of eleven scripts designed for enumeration, exploit suggestion, and deployment. Notable features include support for command-line flags for quicker access and execution, as well as a collection of additional tools for enumeration and exploit deployment, such as Auto-Root-Exploit and Linux Smart Enumeration. This comprehensive suite aids penetration testers in efficiently performing privilege escalation tasks.

The pwk-oscp repository serves as a comprehensive resource for aspiring penetration testers preparing for the OSCP certification, offering a curated collection of scripts, guides, and links to vulnerable machines and challenges. Notable features include categorized sections for enumeration, privilege escalation techniques, and certification resources, alongside curated lists of relevant literature and practical exercises from platforms like HackTheBox and VulnHub. This tool is particularly useful for individuals seeking structured guidance and useful materials throughout their penetration testing journey.

The Privilege Escalation tool in this repository is designed for conducting structured labs on AWS IAM privilege escalation techniques. Its primary use case is to educate users on identifying vulnerabilities and exploiting permission misconfigurations within AWS environments, utilizing tools like Pacu and AWS-IAM-Permissions-Scanner. Notable features include step-by-step guides for creating low-privilege IAM users, testing permissions, and demonstrating privilege escalation methods through policy manipulation.

The polkadots tool is a local privilege escalation exploit targeting CVE-2021-3560, allowing the creation of a new privileged user to gain root access on affected Linux distributions such as RHEL 8, Fedora 21, Debian testing, and Ubuntu 20.04. It includes functionality to generate hashed passwords using OpenSSL, enabling users to customize account credentials during the exploit execution. Notable features include customizable account names and password hashes, along with default settings for easy deployment.

PE-Linux is a Linux privilege escalation tool designed to gather extensive system and environment information to identify potential vulnerabilities and misconfigurations. Its primary use case is to assist security professionals in auditing Linux systems for privilege escalation risks through features such as user enumeration, vulnerability checks, log analysis, and the collection of sensitive information like passwords and SSH keys. Notable features include kernel vulnerability checks, cron job enumeration, and detailed system information gathering to facilitate privileged access exploitation assessments.

The OSCP - PWK (PenTesting With Kali) Notes repository provides comprehensive documentation and practical notes covering the entire curriculum of the OSCP certification course, specifically designed for penetration testing with Kali Linux. It includes detailed sections on various topics such as information gathering, vulnerability scanning, privilege escalation, and exploitation techniques, along with command examples for effective usage. Notable features include organized content for efficient study and reference, alongside practical commands and scripts aimed at enhancing penetration testing capabilities.