Privilege Escalation Python Packages

adscan

Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.

pwncat-cs

Fancy reverse and bind shell handler

actionscope

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

overstep

Authorization regression testing for REST APIs and MCP servers in CI/CD. Define access policies as a matrix, generate positive and negative tests, and detect BOLA, BFLA, BOPLA and privilege escalation — with drift baselines, confidence grading and CWE/OWASP-tagged SARIF reports.

kosty

Scan 30+ AWS services. Find cost waste. Detect security gaps. Map your attack surface. One command.

cepheus-engine

Container escape scenario modeler — enumerate container security posture and model realistic escape paths

delegationbench

Open deterministic security tests for unsafe multi-agent handoffs and authority escalation.

privmap

Open source privelage escalation graph tool for Linux

azath

Assumed-breach Azure/Entra attack-path analyzer. Read-only collectors build a typed identity graph, deterministic detectors find privilege-escalation paths, and an LLM explains and prioritizes them in plain English.

pivotcheck

PivotCheck is an offensive-security decision-support and pivot-validation framework for authorized Red-Team and Penetration-Testing engagements.

gtfobins-cli

Search for Unix binaries that can be exploited to bypass system security restrictions.

iam-security-scanner

AWS IAM security scanner: 44 checks across 7 categories (privilege escalation, confused-deputy trust, MFA, key rotation, least privilege), compliance mapping for 10 frameworks

winsystemshell

A local privilege escalation utility that allows elevating from an administrator context to the SYSTEM account on Windows to perform high-privilege operations.