~/hackyfeed $

The OSCP repository serves as a centralized resource for individuals preparing for the Offensive Security Certified Professional (OSCP) exam, compiling useful materials from various sources including websites, blogs, and books. Key features include organized sections for methodologies, automation scripts, cheat sheets, and troubleshooting documentation, all formatted for compatibility with Obsidian for enhanced note-taking and visual data representation. While the maintainers are no longer actively updating the repository, it aims to remain a valuable reference for future OSCP candidates.

Mobile Heavy Artillery is a comprehensive toolkit designed for red teaming operations, facilitating reconnaissance, exploitation, and privilege escalation tasks. It includes a curated collection of open-source tools for network enumeration, web vulnerability assessment, secrets discovery, and OSINT activities, all easy to install and manage through a makefile. Notable features include a wide range of utilities for various cybersecurity processes, making it a versatile choice for penetration testers and security researchers.

MIDA - Multitool is a comprehensive Bash script designed for system enumeration, vulnerability identification, and privilege escalation after system compromise. It integrates features from previous scripts like SysEnum and RootHelper, allowing users to gather detailed system information, check for useful utilities, download external tools, and search for potential cleartext credentials. Notably, it provides a robust framework for facilitating various tasks crucial for post-exploitation activities.

Love.exe is a development tool designed for exploitation and penetration testing in Windows environments, specifically optimized for Windows 10 and 11 with default UAC settings. It offers functionalities to assist security professionals in identifying vulnerabilities within applications, and it encourages community engagement for enhancements and support. The repository is currently under active development, indicating ongoing updates and feature additions.

Linux Kernel Exploitation is a laboratory tool designed for practicing various exploitation techniques within the Linux kernel environment. It covers advanced exploitation methods such as ret2user, memory manipulation strategies, and kernel information leaks, while providing comprehensive guidelines for compiling and preparing kernel modules and necessary utilities. Notable features include detailed instructions for building kernel sources, configuring BusyBox, and setting up an initial filesystem for testing.

libinject is a static library designed for DLL injection into Windows x64 processes, featuring handle elevation capabilities to bypass certain protections. It enables users to obtain a process handle with higher privileges using elevated access, facilitating interaction with protected processes for debugging or analysis purposes. Notable features include process handle acquisition, memory allocation in target processes, and remote thread creation to execute the injected DLL.

IAM-Flaws is a bash script designed to identify misconfigurations in AWS IAM User and Group Policy Permissions, facilitating privilege escalation assessments. Its primary use case involves conducting CIS Benchmark checks, enumerating IAM entities (users, groups, policies), and scanning for potential privilege escalation vulnerabilities. Notable features include a modular design for executing various checks independently, as well as an integrated output logging mechanism for comprehensive analysis.

IAM-Deescalate is a security tool designed to mitigate privilege escalation risks within AWS identity and access management (IAM) by identifying IAM users and roles susceptible to escalation. It utilizes NCC Group's PMapper to model relationships in an AWS account and provides commands to audit risks, plan remediation, apply policies, and revert changes. Notable features include the ability to dynamically manage inline policies and the use of explicit denies to break risky permissions paths between non-administrative and administrative principals.

The "am0nsec/exploit" repository serves as a collection of exploit scripts and related resources, although the majority of the artifacts are not original contributions from the maintainer. Its primary use case is to provide a centralized resource for penetration testers and security researchers seeking various exploits. Notably, it includes links to the maintainer's social media and personal website for further engagement.

The Docker Privesc script is designed to exploit misconfigurations in Docker environments for privilege escalation purposes. Its primary use case is to gain elevated permissions by leveraging Docker's default configurations, especially in scenarios where a user has access to run Docker on a target system. Notable features include simple usage instructions, requirements for operational conditions, and illustrations of potential mitigation strategies to prevent such attacks.

DLLSpy is a DLL hijacking detection tool designed for Windows environments that identifies vulnerabilities in running processes and services by scanning their binaries for potential hijacking threats. It features three modes of operation: dynamic scanning of loaded modules, static search for DLL references in binaries, and recursive scanning of DLLs to uncover further hijack potential. The tool requires administrative privileges for comprehensive scanning and outputs results in CSV format by default.

The Disable Ctrl+Alt+Del tool is designed to disable the Ctrl+Alt+Del hotkey on Windows 10 x64 systems, requiring administrative privileges for operation. It provides a simple compilation method using g++ or other compilers, making it accessible for users needing to restrict this key combination for security or user interface purposes. Notably, it has been tested and confirmed to work on the specified Windows version.

Dirty Sock is a privilege escalation tool for Linux systems that exploits a vulnerability in the snapd API, allowing unauthorized user creation and root access. It provides two versions: the first requires an internet connection and SSH service to create a local user using Ubuntu SSO, while the second operates without these requirements, leveraging the installation of a "devmode" snap to execute arbitrary commands and bypass access controls. Notably, the tool can be used on both Ubuntu and other distributions with the snapd package installed, making it versatile in various environments.

Delete2SYSTEM is a tool designed to exploit arbitrary file and directory deletion vulnerabilities to achieve NT AUTHORITY\SYSTEM privileges on Windows systems. Utilizing methods derived from known techniques, it specifically targets deletion of critical folders related to Windows Error Reporting and Windows Media Player, leveraging vulnerabilities such as CVE-2020-1170 and CVE-2020-1571. Notable features include integration with the NtApiDotNet library and the ability to weaponize Windows services for privilege escalation.

The Privileged Access Management (PAM) repository is a curated collection of resources that encompasses software best practices, techniques, libraries, frameworks, and educational materials related to securing and managing privileged access to critical assets in cybersecurity. Notable features include categorized content for various platforms such as Linux and Windows, as well as practical guides on privilege escalation methods and access control strategies. This community-driven initiative aims to facilitate knowledge sharing and enhance best practices in the field of PAM.

The cve-2022-21882-poc repository provides a proof of concept (PoC) for the local privilege escalation vulnerability identified as CVE-2022-21882. Its primary use case is to demonstrate the exploitability of this vulnerability in a controlled environment, facilitating security research and testing. Notable features may include detailed instructions for replication of the exploit and potential impacts of the vulnerability.

CVE-2021-27965 is a proof-of-concept (PoC) exploit targeting a local privilege escalation vulnerability in the MICSYS Windows driver, MsIo64.sys. This tool leverages stack-based buffer overflow in the driver's IOCTL dispatch routine, allowing arbitrary physical memory mapping, port access, and potential system crashes. Notable features include the ability to execute IOCTL requests that bypass Windows security mechanisms, facilitating unauthorized access to system-level operations.

The CVE-2020-28243 tool exploits a command injection vulnerability within SaltStack's Salt, allowing for privilege escalation on affected minions when the master executes the `restartcheck` command. Notable features include a straightforward exploit script (`exploit.sh`) for executing arbitrary commands, and the capability to utilize pre-compiled static binaries if gcc is unavailable on the target system. This tool targets SaltStack versions from 2016.3.0rc2 to 3002.2, requiring specific access permissions to function effectively.

This repository provides a proof-of-concept (PoC) for exploiting the CVE-2020-1034 vulnerability, which allows for privilege escalation on unpatched Windows 10 systems. It is primarily used for security research and understanding the exploitability of this specific vulnerability, with notable features including documentation links for deeper insight into exploitation techniques and the context of the vulnerability's discovery and remediation.

PrivEsc-Clippy is a Windows privilege escalation enumeration script designed to assist users in identifying potential vulnerabilities for privilege escalation. Key features include various command options for enumeration, report generation, file downloading, and administrative task execution, making it particularly useful in Capture The Flag (CTF) scenarios. The tool operates independently of Python installation, allowing easy packaging into a standalone executable.

ByeIntegrity 8.0 is a sophisticated Windows privilege escalation tool that exploits design and security flaws in the operating system, operational even with User Account Control (UAC) set to the highest level. It utilizes the Task Scheduler to trigger the WDI ResolutionHost task, manipulating environment variables to load a custom payload that executes with elevated privileges. Key features include controlled event triggering via ETW and direct communication with the Program Compatibility Assistant, enabling a bypass of potential policy restrictions.

ByeIntegrity V is an advanced tool designed to bypass User Account Control (UAC) across all notification levels, granting elevated Administrator privileges to execute any program. Utilizing a combination of DLL hijacking, environment variable manipulation, and the Task Scheduler, it effectively circumvents UAC prompts by launching tasks with the "Run with highest privileges" setting enabled. This tool is particularly notable for its ability to operate without requiring administrator access initially or modifying critical system components, making it a stealthy approach for privilege escalation in Windows environments.

ByeIntegrity 4.0 is a cybersecurity tool designed to exploit User Account Control (UAC) vulnerabilities in Windows for bypassing security mechanisms and achieving elevated privileges. It modifies the `windir` environment variable and utilizes a custom URL protocol to launch `cmd.exe` as an administrator, successfully circumventing UAC protections. Key features include the leveraging of COM interface methods and environment variable manipulation, making it an effective tool for demonstrating UAC bypass techniques in Windows environments.

ByeIntegrity 3.0 is a tool designed to bypass Windows User Account Control (UAC) to achieve elevated privileges for executing arbitrary programs. It employs an elevated COM interface alongside a shell protocol handler hijack, allowing seamless execution of commands like `cmd.exe` with admin rights. Notable features include the use of the `IWscAdmin` interface and the ability to manipulate URL protocol associations to facilitate the UAC bypass in various Windows versions.

ByeIntegrity 2.0 is a tool designed for bypassing Windows User Account Control (UAC) to gain elevated administrator privileges by leveraging a specific elevated COM interface associated with the Internet Explorer Add-on Installer. It features a methodical approach utilizing the `COMAutoApprovalList` registry key to execute arbitrary programs via an elevated instance of `cmd.exe`, thereby circumventing UAC restrictions. This iteration builds on previous designs, sharing core functionality with the UACMe project while incorporating unique lolbin usage for execution.