Linux Privesc Polkit and pkexec (CVE-2021-4034) Local Root
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc
Linux Privesc 
Linux Privesc Capabilities in Containers: cap_sys_admin Escapes
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc LD_PRELOAD and LD_LIBRARY_PATH Abuse via sudo
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc Kernel Exploits for Linux Privilege Escalation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc Writable /etc/passwd and Shadow File Escalation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc Docker Group Membership to Host Root
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc NFS no_root_squash Privilege Escalation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc PATH Hijacking and Relative Binary Execution
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc Cron Job Hijacking and Writable Scripts on Linux
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc Linux Capabilities Abuse: cap_setuid and Friends
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc Sudo Misconfiguration and GTFOBins Escalation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc SUID Binary Exploitation for Linux Privilege Escalation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc Exploiting SUID/SGID Binaries for Linux Privilege Escalation
How attackers abuse SUID/SGID binaries to escalate to root on Linux, plus blue-team detection and hardening.
Linux Privesc Exploiting sudo Misconfigurations with GTFOBins
How attackers turn weak sudo rules, NOPASSWD, env_keep, and LD_PRELOAD into root — and how blue teams shut it down.
Linux Privesc Abusing Linux Capabilities for Privilege Escalation
How attackers abuse cap_setuid and cap_dac_read_search file capabilities to escalate to root, and how blue teams detect it.
Linux Privesc Privilege Escalation via Cron Job Abuse on Linux
Exploit writable cron scripts, weak PATH, and wildcard injection to escalate to root, plus blue-team detection and hardening.
Linux Privesc PATH Hijacking: Privilege Escalation via Writable PATH Directories and Relative Binaries
How attackers abuse relative paths and writable PATH directories to plant malicious binaries and escalate privileges on Linux.
Linux Privesc Abusing NFS no_root_squash for Local Privilege Escalation
How a misconfigured NFS export with no_root_squash lets a low-priv user plant a root SUID binary and escalate.
Linux Privesc Abusing a World-Writable /etc/passwd for Root
How a writable /etc/passwd or /etc/shadow leads to instant root, with PoC and Blue Team defenses.
Linux Privesc Kernel Exploits Deep Dive: Dirty COW and Dirty Pipe
A practical look at CVE-2016-5195 (Dirty COW) and CVE-2022-0847 (Dirty Pipe): how they work, PoCs, and defenses.