Privilege Escalation Python Packages

adscan

Active Directory pentesting tool for Linux. Automated Kerberoasting, AS-REP Roasting, ADCS/ESC exploitation, DCSync, BloodHound integration, and 40+ AD attack paths. ENS Alto / NIS2 / ISO 27001 compliance reports. No Windows required.

pwncat-cs

Fancy reverse and bind shell handler

actionscope

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

kosty

Scan 30+ AWS services. Find cost waste. Detect security gaps. Map your attack surface. One command.

cepheus-engine

Container escape scenario modeler — enumerate container security posture and model realistic escape paths

privmap

Open source privelage escalation graph tool for Linux

iam-security-scanner

AWS IAM security scanner: 44 checks across 7 categories (privilege escalation, confused-deputy trust, MFA, key rotation, least privilege), compliance mapping for 10 frameworks

gtfobins-cli

Command-line tool for GTFOBins - Unix binaries exploitation helper

winsystemshell

A local privilege escalation utility that allows elevating from an administrator context to the SYSTEM account on Windows to perform high-privilege operations.