README.md

splunk_local_privesc

Splunk forwarder ez-pz local privesc tool.

This tool takes advantage of Splunk forwarders running as root with default credentials. The demo payload creates a SUID sh backdoor, change it to suit your needs!