traitor (Linux privesc automation)

./traitor -a

Automates Linux privilege escalation: detects vectors (writable docker.sock, capabilities, sudoers, SUID, vulnerable services, CVEs like CVE-2021-4034) and with -a attempts to exploit them automatically until root is achieved, explaining each step.

When you want a second pair of eyes on manual enumeration: traitor -a runs all checks and, if it finds an exploitable vector, exploits it on its own and leaves you at root (or tells you exactly why it can't). I use it as a quick verification after classic manual enumeration, especially on hosts where obvious vectors have failed.

If the goal is stealth: -a mode executes real exploits (launches docker containers, compiles, runs PoCs) and is easily detectable. Also don't use it on production hosts without explicit authorization: automatic exploits can leave processes, containers, or temporary files.