~/hackyfeed $

ByeIntegrity is a tool designed to bypass Windows User Account Control (UAC) in order to gain elevated Administrator privileges for executing programs at a high integrity level. Its notable features include the ability to hijack DLLs in the Native Image Cache (NIC) without relying on existing native images and the use of an auxiliary file generator (AUXGen) to facilitate the loading of shellcode without direct dependency on system resources. The latest update enhances its speed, reliability, and usability by streamlining the hijacking process and minimizing the initial configuration overhead.

ByeIntegrity Lite is a tool designed to exploit a shell protocol handler hijack to bypass Windows User Account Control (UAC) and achieve elevated privileges for executing programs at a higher integrity level. It specifically alters the handler for the `ms-settings` protocol to redirect it to `cmd.exe`, allowing execution of `fodhelper.exe`, which inherits elevated tokens. Notable features include its simplicity and compatibility with all versions of Windows 10; however, there are no precompiled binaries available to prevent misuse.

AymanSecNotes is a personal compilation of cybersecurity notes in PDF format, primarily serving as a self-study resource for various security domains including mobile, web, and networks. Notable features include plans for future enhancements such as a comprehensive cheatsheet, the transition from PDF to Markdown format, and the inclusion of methodologies and bug hunting tips, aimed at facilitating practical learning and knowledge sharing within the cybersecurity community.

Awesome Infosec is a curated collection of Information Security resources and tools designed to aid individuals in their studies and practices of cybersecurity. It encompasses various topics, including recon, web security, penetration testing, and exploit development, while also providing links to educational courses and labs. The continuously updated repository serves as a valuable resource for both beginners and experts in the field.

Anyelevate is a Windows x64 privilege escalation tool that leverages the anycall technique to elevate the privileges of a specified process by copying the system process token into the target process's context. The tool operates by manipulating physical memory to enable the execution of tasks with NT AUTHORITY\SYSTEM privileges, making it particularly useful for security researchers and penetration testers looking to demonstrate or exploit privilege escalation vulnerabilities. Notable features include its simplicity of use and the ability to specify a process ID for targeted elevation.

The `amd_eop_poc` tool serves as a proof of concept for exploiting a privilege escalation vulnerability (CVE-2020-8950) within the AMD User Experience Program Launcher associated with Radeon Software. Its primary use case is to demonstrate the FileWrite escalation of privileges, enabling unauthorized access to system resources. Notable features include detailed documentation and references to external resources for further context on the vulnerability.

adduser-dll is a straightforward dynamic-link library (DLL) that facilitates the creation and addition of users to the local Administrators group on Windows systems. Its primary use case is for administrative automation in user management tasks, allowing customization of usernames, passwords, and group permissions through code modifications. Notable features include its standalone execution via `rundll32.exe` and the ability to be injected or called from other scripts or tools, enhancing flexibility in usage.

This repository provides a comprehensive list of methods to coerce Windows machines into authenticating to an attacker-controlled machine, leveraging vulnerabilities in the authentication process. It includes 15 tested functions across 5 protocols, with functionalities for communicating through distributed file systems and encrypting file systems, ultimately facilitating unauthorized access to resources. The tool is intended for penetration testing and security audits, enhancing the capabilities of security professionals in assessing Windows environments.

#system3 is a tool designed to facilitate system shell access and the installation of system applications on Samsung devices, bypassing restrictions imposed by the One UI 5.1 SMT patch. It leverages the Factory Test Launcher to gain system UID privileges, enabling users to downgrade and install applications without encountering standard installation errors. Notable features include support for a wide range of Samsung devices and the ability to execute installations that are typically restricted, thereby restoring functionality for various system-level applications.

SUIDump is an automated tool for identifying potential privilege escalation vectors in Linux systems by analyzing setuid binaries. It leverages the GTFOBins database to assess known exploitation methods, allowing users to conduct both standard and verbose scans for security auditing purposes. Key features include automated discovery of SUID binaries, a customizable command-line interface, and handling of rate limiting for checks against GTFOBins.

The SELinux-Kernel-Module-Bypass tool enables users to bypass SELinux protections through the use of the `init_module` function, primarily aimed at security researchers and penetration testers. This project provides resources and methods for exploiting SELinux configurations, enhancing the understanding of kernel module behavior within constrained environments. Notable features include documentation and links to related resources for further exploration of Linux kernel module manipulation.

Road To Hacking is a comprehensive guide designed for enthusiasts of Ethical Hacking, providing an extensive overview of widely used tools for penetration testing and auditing. Notable features include detailed instructions on tools such as Nmap for vulnerability detection, Metasploit for exploitation, and Aircrack-ng for cracking WPA/WPA2-PSK, among many others. This resource emphasizes practical usage, ensuring users have foundational knowledge in Linux and terminal commands to effectively utilize the tools presented.

PYTMIPE is a Python 3 library that facilitates Windows token manipulation and impersonation for privilege escalation, allowing users to gain elevated access within Windows environments. The tool features various methods for managing tokens and privileges, including token creation, impersonation, and access to additional escalation techniques like parent PID spoofing and service management. Additionally, it provides capabilities to retrieve comprehensive information about selected tokens and supports both local and remote token operations.

pwncat is a versatile post-exploitation platform designed primarily for Linux targets, though it now includes alpha support for Windows. It enhances red team operations by automating interactions with remote shells, enabling functionalities like enumeration, implant installation, and privilege escalation. Notable features include the ability to spawn pseudo-terminals, synchronize shell environments, and streamline the management of remote connections for more efficient exploitation.

Phanto is a Windows tool designed for privilege escalation by bypassing User Account Control (UAC) prompts, enabling malware execution on Windows 10 and 11 systems when an administrator account is compromised. Its primary use case is facilitating unauthorized access while concurrently removing indicators of compromise to conceal malicious activity. Notable features include its ability to execute without user consent and the functionality to erase traces post-execution.

PetitPotato is a local privilege escalation tool that leverages the PetitPotam technique by abusing impersonate privileges via the MS-EFSR protocol. Its primary use case is to gain SYSTEM privileges on target Windows systems by exploiting vulnerabilities in encrypted file system operations. Notable features include compatibility with the latest Windows versions and the ability to execute arbitrary commands by specifying the desired EfsID and command parameters.

Payloads All The Things is a comprehensive repository offering a curated list of payloads and techniques specifically designed for web application security testing. It includes detailed documentation on various vulnerabilities and how to exploit them, alongside resources for tools like Burp Intruder. Notable features include structured chapters with vulnerability descriptions, applicable payloads, and a collection of methodologies for diverse security scenarios, making it an essential toolkit for penetration testers and security professionals.

MSAPer is an automated mass exploitation tool designed for identifying and exploiting the CVE-2023-3076 vulnerability in MStore API versions below 3.9.9, which enables unauthenticated privilege escalation through mass addition of admin accounts and PHP file uploads. The tool utilizes GNU Parallel for efficient execution and requires a list of target URLs as input. Notable features include the ability to run on both Linux and Windows platforms, along with installation instructions for necessary dependencies.

Lucifer is a Python-based tool designed for shell manipulation and module management within cybersecurity frameworks. Its primary use case involves automating and simplifying the interaction with different shells and related modules, allowing users to set variables, run exploits, and manage options efficiently. Notable features include dynamic module indexing, the ability to spawn alternate shells, and a comprehensive set of commands for module interaction.

LocalAdminSharp is a .NET executable designed for privilege escalation on Windows systems, enabling the creation of local administrator accounts or the addition of existing users to the local administrator group. This tool can be customized for different users and domains and is suitable for standalone execution or integration into other scripts for privilege escalation scenarios. Key features include ease of customization, compatibility with Visual Studio for compilation, and a focus on evading detection by security software.

The Linux-Privilege-Escalation tool provides a comprehensive set of techniques for escalating privileges on Linux systems. Its primary use case includes identifying vulnerabilities related to kernel exploits, file permissions, and sudo configurations, while notable features include detailed methods for exploiting kernel vulnerabilities, leveraging GTFOBINS for privilege escalation, and examining scheduled tasks and SUID binaries for potential exploitation paths.

The Linux Privilege Escalation Cheatsheet provides a comprehensive checklist of strategies and techniques for escalating privileges on Linux systems. It encompasses various methods, such as exploiting weak configurations and file permissions, utilizing scripts like Linux Smart Enumeration and LinEnum for system enumeration, and suggests using manual commands for deeper analysis. Notable features include a structured strategy for conducting privilege escalation assessments and references to additional tools and resources for enhanced exploitation.

Linux-Kernel-VR-Exploitation is a toolset designed for vulnerability research and exploitation specifically targeting the Linux and Android kernel. It provides a comprehensive environment setup guide, along with resources for exploitation tutorials, practice playgrounds, and detailed academic research papers, facilitating both practical experimentation and theoretical understanding of kernel vulnerabilities. Notable features include curated links to extensive educational materials, CTF challenges for skill development, and insights into kernel tracing and various exploitation techniques.

The Linux Privilege Escalation Cheatsheet provides a comprehensive collection of detection and exploitation methods for common privilege escalation vulnerabilities in Linux systems. It includes techniques for exploiting SUID binaries, weak file permissions, and environmentally controlled executions, along with practical command examples for each method. Notable features include links to tools like `linux-exploit-suggester`, as well as code snippets for exploits that can be compiled and executed, making it a valuable resource for penetration testers and security professionals.

The Jr Penetration Tester repository provides solutions and an answer key for the Penetration Tester learning path on TryHackMe, aimed at equipping users with essential skills for a career in penetration testing. It covers various critical topics, including web hacking, Burp Suite, network security, vulnerability research, and exploitation techniques using Metasploit. Notable features include comprehensive sections that guide learners through foundational concepts and practical applications in cybersecurity.