Linux Privesc Docker Group Membership to Host Root
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
2026-07
Linux Privesc 
Linux Privesc NFS no_root_squash Privilege Escalation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc PATH Hijacking and Relative Binary Execution
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc Cron Job Hijacking and Writable Scripts on Linux
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Windows Privesc Abusing Windows Backup and Restore Privileges
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory Pass-the-Hash: Authenticating with NTLM Hashes
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory Golden Ticket Attacks: Forging TGTs with the KRBTGT Hash
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory Kerberos Constrained Delegation (KCD) and S4U Abuse
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc Linux Capabilities Abuse: cap_setuid and Friends
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc Sudo Misconfiguration and GTFOBins Escalation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc SUID Binary Exploitation for Linux Privilege Escalation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Windows Privesc Print Spooler and PrintNightmare Local Escalation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Windows Privesc Named Pipe Impersonation for Local Privilege Escalation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Windows Privesc Insecure Registry Autoruns and Service ImagePath Writes
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Windows Privesc Scheduled Task and Startup Folder Privilege Escalation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Windows Privesc Stored Credentials Hunting: DPAPI, Registry, and Files
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Windows Privesc DLL Hijacking and Search-Order Abuse on Windows
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Windows Privesc Token Impersonation and Stealing on Windows
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Windows Privesc UAC Bypass Techniques via Auto-Elevating Binaries
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Windows Privesc AlwaysInstallElevated: MSI Privilege Escalation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Windows Privesc Weak Service Permissions and Binary Path Hijacking
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Windows Privesc Unquoted Service Path Exploitation on Windows
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Windows Privesc SeImpersonatePrivilege Abuse: The Potato Family
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory Targeted Kerberoasting with Write Access
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory NTLM Relay to LDAP and SMB: Coercion to Compromise
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory LDAP Reconnaissance for Active Directory Attack Paths
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory GPO Abuse: Code Execution via Group Policy
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory DACL Abuse in Active Directory: GenericAll and WriteDACL
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory Shadow Credentials: Key Trust Account Takeover
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory AD CS ESC1: Vulnerable Certificate Template Enrollment
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory Resource-Based Constrained Delegation (RBCD) Abuse
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory Unconstrained Delegation Abuse and TGT Capture
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory Overpass-the-Hash: From NT Hash to Kerberos TGT
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...