liamg/traitor

Health v2 · maintenance only

Adoption not part of the score

7160 stars · 700 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Traitor is a Go-based CLI tool that automatically exploits common Linux misconfigurations and known vulnerabilities (GTFOBins, pwnkit, dirty pipe, writable docker.sock) to gain a root shell. It can scan for potential escalation vectors and attempt them individually or all at once.

Use cases

• automatically escalate privileges to root on a linux box
• find local privilege escalation vulnerabilities on a machine
• exploit pwnkit or dirty pipe to get a root shell
• check if docker.sock is writable and abuse it for root
• ctf privilege escalation tool for hackthebox
• enumerate sudo misconfigurations via gtfobins

When to choose

• you need quick automated privesc during a pentest or CTF
• you want a single binary that bundles many known linux escalation exploits
• you want to enumerate potential escalation vectors before exploiting

When to avoid

• you need stealthy or custom exploitation rather than loud automated attempts
• you are on a non-Linux/unix-like target
• you need a comprehensive vulnerability scanner rather than a privesc tool
• the target requires avoiding known-CVE exploitation

Facets

cli-tool · maturity maintenance

security penetration-testing security penetration-testing cli go privesc privilege-escalation gtfobins exploit redteam cve-exploits root-shell command-line linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="liamg/traitor")