Basic Tutorial


Here you will find privilege escalation tools for Windows and Linux/Unix* and MacOS.These tools search for possible local privilege escalation paths that you could exploit and print them to you with nice colors so you can recognize the misconfigurations (https://www.kitploit.com/search/label/Misconfigurations) easily.Check the Local Windows Privilege Escalation (https://www.kitploit.com/search/label/Windows%20Privilege%20Escalation) checklist from book.hacktricks.xyz (https://book.hacktricks.xyz/windows/checklist-windows-privilege-escalation)WinPEAS (https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/winPEAS) - Windows local Privilege Escalation Awesome Script (C#.exe and .bat)Check the Local Linux Privilege Escalation (https://www.kitploit.com/search/label/Linux%20Privilege%20Escalation) checklist from book.hacktricks.xyz (https://book.hacktricks.xyz/linux-unix/linux-privilege-escalation-checklist)LinPEAS (https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/linPEAS) - Linux local Privilege Escalation Awesome Script (.sh)
Let's improve PEASS together
If you want to add something and have any cool idea related to this project, please let me know it in the telegram group https://t.me/peass or contribute reading the CONTRIBUTING.md (https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/blob/master/CONTRIBUTING.md) file.
PEASS Style
Are you a PEASS fan? Get now our merch at PEASS Shop (https://teespring.com/stores/peass) and show your love for our favorite peas
Advisory
All the scripts/binaries of the PEAS suite should be used for authorized penetration testing (https://www.kitploit.com/search/label/Penetration%20Testing) and/or educational purposes only. Any misuse of this software will not be the responsibility of the author or of any other collaborator. Use it at your own networks and/or with the network owner's permission.
License
MIT LicenseBy Polop(TM)

Download PEASS-ng (https://github.com/carlospolop/PEASS-ng)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
PEASS-ng - Privilege Escalation Awesome Scripts SUITE new generation

https://blogger.googleusercontent.com/img/a/AVvXsEhKhrHf3Et9fXLg8FlgMpsU4PptnQfpT70Gs5Rr3XYGxJucf9VrmvekCOABHaEJX5gSBa-OxEs2QPAm9EqrZSWb-8ewPfSTFWoimizG8FZgQdE7LWuBAsKNGhmCUpEyIhWRZjos7Pr85ZjMhfBR4vdNnPEkLeq6Exu07pWsldVoI1FfUA3KWkKAhQZLkg=w640-h200
Basic Tutorial
Here you will find privilege escalation tools for Windows and Linux/Unix* and MacOS.

These tools search for possible local privilege escalation paths that you could exploit and print them to you with nice colors so you can recognize the misconfigurations easily.

*
Check the Local Windows Privilege Escalation checklist from book.hacktricks.xyz

*
WinPEAS - Windows local Privilege Escalation Awesome Script (C#.exe and .bat)

*
Check the Local Linux Privilege Escalation checklist from book.hacktricks.xyz

*
LinPEAS - Linux local Privilege Escalation Awesome Script (.sh)
Let's improve PEASS together

If you want to add something and have any cool idea related to this project, please let me know it in the telegram group https://t.me/peass or contribute reading the CONTRIBUTING.md file.

PEASS Style

Are you a PEASS fan? Get now our merch at PEASS Shop and show your love for our favorite peas

Advisory

All the scripts/binaries of the PEAS suite should be used for authorized penetration testing and/or educational purposes only. Any misuse of this software will not be the responsibility of the author or of any other collaborator. Use it at your own networks and/or with the network owner's permission.

License

MIT License

By Polop(TM)
Download PEASS-ng

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Why Should My Organization Consider XDR?

XDR is a newish industry term addressing a very old problem: security products that don't work together to detect threats.

Dark Reading: Attacks/Breaches
Microsoft Launches Security Program for Nonprofits

A new set of security tools is built to assess risk, provide monitoring and notification if an attack occurs, and train IT pros and users.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Cohesity Announces Disaster Recovery as a Service, Providing Automated Disaster Recovery

New Offering Can Help Businesses Quickly Recover from Ransomware Attacks, Speed Data Recovery, and Advance Business Continuity

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Nearly Three-Quarters of Organizations Victimized by DNS Attacks in Past 12 Months

Response and recovery have significant impact on 58% of targeted businesses.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Invicti Security Announces $625 Million Growth Investment Led by Summit Partners

Web application security provider plans to leverage new investment to continue product expansion and support global growth.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Google Buckles Down on Android Enterprise Security

The launch of Android 12 brings several new default security features, along with new security efforts for Android Enterprise.

Dark Reading: Attacks/Breaches
Plurilock to Acquire Assets of CloudCodes Software

Transaction marks Plurilock’s second acquisition in 2021.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Akamai Technologies Completes Acquisition of Guardicore to Extend Its Zero Trust Solutions to Help Stop Ransomware

Guardicore's micro-segmentation products will be added to Akamai's portfolio of Zero Trust solutions.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Cybrary Launches New Partnership with Check Point Software to Make Cybersecurity Training Accessible to All

Online cybersecurity professional development platform bolsters the Check Point Education Initiative.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Malware Abuses Core Features of Discord

Researchers warn that Discord's bot framework can be easily weaponized.

___________________________
@hacking_Attack
@Hacking_Video

OffensiveVBA release
https://www.reddit.com/r/redteamsec/comments/qd11an/offensivevba_release/

submitted by /u/S3cur3Th1sSh1t (https://www.reddit.com/user/S3cur3Th1sSh1t)
[link] (https://github.com/S3cur3Th1sSh1t/OffensiveVBA) [comments] (https://www.reddit.com/r/redteamsec/comments/qd11an/offensivevba_release/)

___________________________
@hacking_Attack
@Hacking_Video

Using Kerberos for relaying
https://www.reddit.com/r/redteamsec/comments/qd12h4/using_kerberos_for_relaying/

submitted by /u/S3cur3Th1sSh1t (https://www.reddit.com/user/S3cur3Th1sSh1t)
[link] (https://googleprojectzero.blogspot.com/2021/10/using-kerberos-for-authentication-relay.html) [comments] (https://www.reddit.com/r/redteamsec/comments/qd12h4/using_kerberos_for_relaying/)

___________________________
@hacking_Attack
@Hacking_Video

abusing serverless for fun and profit
https://www.reddit.com/r/redteamsec/comments/qd2qml/abusing_serverless_for_fun_and_profit/

submitted by /u/jeanc0re (https://www.reddit.com/user/jeanc0re)
[link] (https://redteamer.tips/servers-are-overrated-bypassing-corporate-proxies-abusing-serverless-for-fun-and-profit/) [comments] (https://www.reddit.com/r/redteamsec/comments/qd2qml/abusing_serverless_for_fun_and_profit/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Atm softwear

Hey all how many people know anything about ATM's running on windows 7 pro...im not 110% sure but last time I heard win7 dosnt even get updated anymore not to sure about win7 pro but what could happen to a atm running such software?

submitted by /u/devilbasher
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What are the future tools in EH?

I was wondering about the new and upcoming tools and prototypes in ethical hacking to carry out various exploits ?

submitted by /u/ExternalIncrease4456
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do I hack gradescope?

I need to remove submissions and i cant have my teacher seeing it, how do I get onto it and remove it.

advice needed

submitted by /u/TheCrazedLunatic
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bypass windows 7 - 10 password

My brother just recently passed away and I can't remember if he has windows 7 or windows 10 loaded on his PC. I know I used to use a program to bypass windows 7 passwords utalizing a USB but it's been a long time. Wondering if anyone has any suggestions on a go to program. Anything will help thankyou

submitted by /u/Finaglemybagell
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Want to learn or compete in CTFs?

Are you a cybersecurity student or you would like to learn what white hackers do or simply want to learn? Then join us!

-We mainly teach and learn together on platforms such as HackTheBox, TryHackME and CTF competitions

-We have developers, network admins, system admins and more for you to ask any sort of IT question

-Learn about technologies as simple as that - Network, Systems, Language and more

-Some of us know generic laws that apply to IT

-Get experience that can be transferred to the real world

​

Any age, gender, level and location is welcome. No illegal activities or you will be banned. We white hats are the ones who make a better world for everyone by protecting your services, data and personal information!

​

Our website: http://n00bsctfs.team/

submitted by /u/alexsuavex3
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video