wget -qO - | sudo apt-key add -Įcho 'deb apt/stable/' | sudo tee /etc/apt//sublime-text.list SublimeText – A very sophisticated text editor for code and markup. Usually used with PEDA (Python Exploit Development Assistance for GDB), which colorizes and displays disassembly codes, registers, memory information during debugging, and adds extra commands. GDB – The GNU Project debugger, allows one to see what is going on ‘inside’ a program while it executes or what a program was ‘doing’ at the moment it crashed. sudo gem install zstegĮxifTool – An application for reading and writing meta information in a wide variety of files. Zsteg – A Ruby application to detect and extract hidden data in image files. Will create a sudoers file that makes sudo tokens eternal and allows all users to use sudo: bash exploit_v3.shįoremost – A forensics tool to recover files based on headers and footers from disk or image file. Will create a sh shell in /tmp owned by root with setuid: bash exploit_v2.sh You can use it to activate the sudo token in your session: bash exploit.sh Will create the binary activate_sudo_token in /tmp. Sudo_inject – Injects process that have valid sudo token and activate our own sudo token. SuBruteForce – Full throttle to get access as a specific user.

Sudo -V | grep 'Sudo ver' searchsploit 'sudo 1.9.5p1' Other sources of vulns/exploits at NIST Search Vulnerability Database, Mitre CVE, and CVE Program Mission. SearchSploit – Simple way to search for vulnerabilities on a local copy of the. Tnmap.py – This program breaks a big network into many small segments to enable parallel scans, multi-hosts task share, and more.

Powershell exiftool