// 0x6a_v1.0
Logo
← cd ../notes

PrivEsc Matrix: one place for privilege escalation

//Project, Pentesting, Privilege Escalation, Next.js

PrivEsc Matrix

privesc.0x6a03448f4d.com is the tool I wanted while doing boxes: every privilege-escalation reference I keep opening, in one place, offline, and fast. Built with AI help, but the shape of it is mine — it is what my own workflow looks like.

The problem it solves

Doing a Linux box, I would have five tabs open: GTFOBins, LOLBAS, revshells.com, a TTY-upgrade gist, and my own notes. PrivEsc Matrix folds all of that into one screen.

What is in it

  • Unified search across six sources: GTFOBins, LOLBAS, WADComs, GTFOArgs, HijackLibs and LOLDrivers — about 2,700 techniques, each linking back to its official page.
  • Reverse-shell generator (bash, nc, python, php, perl, ruby, socat, powershell…) with URL / base64 encodings and a ${IFS} space bypass.
  • MSFVenom builder and a TTY-upgrade helper.
  • Cheatsheets for the commands I actually run: sudo -l, SUID and capability enumeration, linpeas, file transfer, known local exploits, and pivoting (chisel, ligolo, ssh tunnels).
  • Enumeration scanner — paste the output of find / -perm -4000 or sudo -l and it highlights which of those binaries have a known escalation vector. That is the part none of the original sites do.

How it is built

Everything runs in your browser. A build-time pipeline compiles the upstream sources into a single static JSON, so the search is instant and there are no external calls at runtime. Same privacy-first, nonce-based-CSP approach as the rest of the fleet.

Try it: privesc.0x6a03448f4d.com