peass-ng/PEASS-ng

Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.

Curated Linux LPE corpus — 28 modules from 2016 to 2026, with detection rules. One command, safest-first root: skeletonkey --auto --i-know

Privilege Escalation Enumeration Script for Windows

Multi-architecture Linux privilege escalation toolkit with 29 pre-built and runtime-compilable exploits. Auto-detects kernel version, filters patched exploits, tries each until root.

A BloodHound OpenGraph collector that models Windows local privilege escalation as interconnected attack paths.

Map your path from a low-priv user to roo, like BloodHound, for local Linux privesc.

Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for Privilege Escalation in Windows environments.

Linux privilege escalation auditing tool

CredsHunter - Credential Hunting scripts for Windows and Linux OS