You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
A Linux privilege escalation scanner built to help security professionals find potential vectors for privilege escalation during penetration tests and security audits.
EscalateX is a cybersecurity tool designed to identify priviledge escalation vectors on Linux systems. Automating the process of finding potential vulnerabilities and a modern alternative to LinPEAS is the purpose of EscalateX.
13
23
14
-
## About
24
+
The tool is currently in its early development phase. Bugs can and will occur while running the tool - therefore, please report your findings by sending me an email.
15
25
16
-
EscalateX scans Linux systems for common privilege escalation vulnerabilities and misconfigurations. I built this tool after getting tired of manually checking the same things during every pentest engagement.
26
+
### Key Features
17
27
18
-
What it does:
19
-
- Checks system configs, permissions, and security settings
20
-
- Identifies SUID/SGID binaries and capabilities that could be abused
21
-
- Finds writable files and directories in sensitive locations
22
-
- Detects kernel vulnerabilities that might lead to privilege escalation
23
-
- Evaluates container escape vectors
28
+
- ✅ **System Configuration Analysis**: Identifies misconfigurations in system settings
You can extend EscalateX with your own custom modules:
165
219
166
-
You can write your own modules if you want to check for specific things. Here's how:
220
+
<details>
221
+
<summary><b>How to create custom modules</b></summary>
167
222
168
223
1. Create a script in the modules directory
169
224
2. Use this basic structure:
@@ -200,17 +255,28 @@ custom_checks() {
200
255
```
201
256
202
257
3. Add your module to loader.sh
258
+
</details>
203
259
204
-
## Important Warning
260
+
## ⚠️ Important Warning
205
261
206
-
This is a security tool. Use it responsibly:
262
+
<divalign="center">
263
+
264
+
**This is a security tool. Use it responsibly.**
265
+
266
+
</div>
267
+
268
+
- 🔒 Only run it on systems you own or have permission to test
269
+
- 🚨 Some checks might trigger security alerts or monitoring
270
+
- ⚙️ Be careful in production environments
271
+
- 🤝 Don't be a jerk - never use this for unauthorized access
272
+
273
+
## 📝 License
207
274
208
-
- Only run it on systems you own or have permission to test
209
-
- Some checks might trigger security alerts or monitoring
210
-
- Be careful in production environments
211
-
- Don't be a jerk - never use this for unauthorized access
275
+
<divalign="center">
276
+
277
+
[](https://creativecommons.org/licenses/by-nc/4.0/)
212
278
213
-
## License
279
+
</div>
214
280
215
281
This project is licensed under the Creative Commons Attribution-NonCommercial 4.0 International License (CC BY-NC 4.0) - see the [LICENSE](LICENSE.md) file for details.
216
282
@@ -220,12 +286,18 @@ This means you can freely use, modify, and distribute this software, as long as:
220
286
221
287
For more information, visit: https://creativecommons.org/licenses/by-nc/4.0/
222
288
223
-
## Contributing
289
+
## 👥 Contributing
224
290
225
-
Contributions welcome! To contribute:
291
+
Contributions are welcome and appreciated! To contribute:
226
292
227
-
1. Fork the repo
293
+
1. Fork the repository
228
294
2. Create a branch (`git checkout -b cool-new-feature`)
229
295
3. Commit your changes (`git commit -m 'Added some cool feature'`)
230
296
4. Push to your branch (`git push origin cool-new-feature`)
0 commit comments