portbuster1337/lpe-toolkit — explained in plain English
Analysis updated 2026-08-03 · repo last pushed 2026-07-07
Run an automated check on a Linux machine to see if a low-level user can gain root access via known kernel exploits.
Audit a server for misconfigured sudo permissions using the built-in GTFOBins handler covering 80+ common programs.
Preview which exploits would apply to a specific kernel version without executing them using dry-run mode.
Automate privilege escalation checks in scripted security assessments with silent mode output.
| portbuster1337/lpe-toolkit | fractalfir/crustc | torvalds/hunspellcolorize | |
|---|---|---|---|
| Stars | 328 | 331 | 344 |
| Language | C | C | C |
| Last pushed | 2026-07-07 | — | — |
| Maintenance | Active | — | — |
| Setup difficulty | moderate | hard | easy |
| Complexity | 4/5 | 5/5 | 1/5 |
| Audience | ops devops | developer | developer |
Figures from each repo's GitHub metadata at analysis time.
Requires access to a target Linux machine with a basic user shell, may need gcc installed on non-64-bit Intel/AMD systems.
This is a Linux privilege escalation toolkit, a tool designed to help someone with a low-level user account on a Linux machine gain root (administrator) access. It bundles 24 known exploits for various Linux vulnerabilities and automatically tries them one by one until one succeeds. The primary audience is security professionals, penetration testers, or anyone who needs to demonstrate that a Linux system can be compromised through unpatched kernel or service bugs. You run it on a target machine where you already have a basic user shell. The tool detects the running kernel version, filters out exploits that have already been patched on that system, and then works through the remaining ones. For 64-bit Intel/AMD systems, the exploits are pre-compiled and embedded inside the binary so no compiler is needed on the target. For other processor architectures (ARM, MIPS, older 32-bit Intel), it compiles the exploits on the fly using gcc if available. It also includes a "GTFOBins" handler that checks for 80+ common programs that can be abused to run commands as root when misconfigured with passwordless sudo access. The tool offers several modes. A dry-run flag shows which exploits would be attempted without actually running them. You can skip specific exploits, run a specific command as root once access is achieved, or operate in silent mode for automation scenarios where you only want the output of that command. This makes it useful for both interactive testing and scripted security assessments. The exploit list covers a wide range of vulnerability types: kernel memory corruption bugs, filesystem page-cache overwrites, network stack races, and misconfigured services like Docker sockets or PackageKit. Some targets specific kernel versions while others work across broader ranges. One notable design choice is that all exploits, even proof-of-concept ones, are wired to either spawn a root shell or execute a requested command, making the tool consistently actionable rather than just demonstrative.
A Linux security tool that bundles 24 known exploits to help testers escalate from a basic user account to root (admin) access. It auto-detects the system, filters unpatched vulnerabilities, and tries each exploit until one works.
Mainly C. The stack also includes C, GCC, Linux.
Active — commit in last 30 days (last push 2026-07-07).
No license information is provided in the repository, so default copyright restrictions apply and usage rights are unclear.
Setup difficulty is rated moderate, with roughly 30min to a first successful run.
Mainly ops devops.
This repo across BitVibe Labs
Don't trust strangers blindly. Verify against the repo.