github.comrepoarmourinfosec/Offensive-Linux-Privilege-Escalation
A structured collection of 50+ notes taking a low-privileged Linux foothold to root, covering sudo/SUID misconfigurations, GTFOBins and LD_PRELOAD abuse, the Baron Samedit sudo bug, Linux capabilities, cron/systemd-timer abuse, kernel exploits (DirtyCow, DirtyPipe, OverlayFS, PwnKit), NFS no_root_squash, Docker/LXD namespace escapes, screen/tmux and D-Bus IPC abuse, and credential mining. Each note follows a concept-to-exploitation-to-detection-to-defense format and the repo includes a methodology checklist, hardening guide, two guided labs with a lab-setup script, and skills assessments, published for authorized lab/CTF use under CC BY 4.0.
TL;DR A hands-on, 50+-note Linux privilege-escalation reference pairing every exploitation technique with detection and defense guidance.
Organisations named here
- Baron Samedit
- DirtyCow
- DirtyPipe
- LD_PRELOAD
- no_root_squash
- OverlayFS
- PwnKit
Technologies named here
- Linux
- LinPEAS
- Kali Linux
- LinEnum
- Docker
- pspy
- GTFOBins
- LXD
- NFS
- in-repo bash enum script
- Obsidian
- Sudo
- systemd
- Linux kernel
- SSH
Techniques named here
- Enumeration and methodology
- Sudo misconfiguration abuse
- Sudo version bypass
- LD_PRELOAD abuse
- SUID/SGID binary abuse
- Shared-library/PATH hijacking
- Linux capabilities abuse
- Cron job abuse
- Systemd timer abuse
- Kernel exploitation
- NFS no_root_squash abuse
- Docker group/namespace escape
- LXD group/namespace escape
- Session/IPC abuse
- Credential mining
Related in Offensive Security
huntress.comwriteupAI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
github.comrepoYesWeHack Claude Kit
huntress.comwriteupInside an Oracle Database SQL Injection Attack | Huntress
huntress.comwriteup