Browsing category

Privilege Escalation

TikiTorch – Process Injection Tool

TikiTorch was named in homage to CACTUSTORCH by Vincent Yiu. The basic concept of CACTUSTORCH is that it spawns a new process, allocates a region of memory, then uses CreateRemoteThread to run the desired shellcode within that target process. Both the process and shellcode are specified by the user. This is pretty flexible as it […]

Postenum – Basic/Advanced Privilege Escalation Techniques

Postenum is a clean, nice and easy tool for basic/advanced privilege escalation techniques. Changelog for latest version – 0.7 Check java and Exim versions Display the content of passwd.master file (OpenBSD) SELinux status Check for the existence of Kerberos tickets and GPG keys Sensitive logfiles owned by root – readable? Shell escape – [nmap without […]