Privilege Escalation
Engine for Linux
Rootware is a curated, terminal-native toolkit for local privilege escalation testing. Automatically enumerates and executes exploit chains against Linux systems. v3.1
About
Rootware is designed for security professionals and penetration testers who need to evaluate Linux system security. It provides a unified interface to test multiple privilege escalation vectors in a controlled, automated manner.
The engine downloads and executes exploit payloads in isolated temporary workspaces, cleaning up all artifacts after each attempt. This ensures no persistent changes are made to the target system.
Automated LPE Chain
Executes multiple exploit methods sequentially until privilege escalation is achieved.
Lightweight & Fast
Single binary with no dependencies. Runs directly from the terminal on any Linux system.
License Management
Secure time-based licensing system with validation and expiration tracking.
System Intelligence
Automatically detects kernel version, architecture, and user context for targeted testing.
Usage
Download the Rootware binary and run it directly. You will need a valid license key obtained from the Telegram bot.
curl -L -o rootware https://rootware.pages.dev/rootware
chmod +x rootware
# Run Rootware
./rootware
When prompted, enter your license key. The key format is a combination of letters
and numbers, e.g., ROOTWAREFREE.
$ ./rootware
❯ Enter license key: ROOTWAREFREE
✓ License validated. Expires: 31-12-2026
✓ Found 12 exploit methods
# Select execution mode
❯ Select execution vector [1-5]: 1
Exploit Methods
Rootware includes a curated collection of local privilege escalation techniques. Each method is tested and maintained for reliability across different Linux distributions and kernel versions.
- copyfail — Page cache corruption via AF_ALG (CVE-2026-31431)
- dirtyfrag — ESP/XFRM page cache write (CVE-2026-43284)
- pack2theroot — PackageKit TOCTOU LPE (CVE-2026-41651)
- gttobins — GTFO Bins privilege escalation
- kernel — Various kernel exploits
- sudo — Sudo privilege escalation vectors
- docker — Docker container escape methods
- and other methods
The full method list is dynamically loaded from the server, ensuring you always have access to the latest exploits without updating the binary.
Access & Licensing
Rootware uses a time-based licensing model. Each license key has a specific expiration date. Keys are issued through the Telegram bot at @rootwbot.
To obtain a license key, open the bot and follow the instructions. The bot will provide you with a unique key that you can use to activate Rootware.
KEY DD-MM-YYYY
# Example entry in licenses
ROOTWAREFREE 31-12-2026
Security
Rootware operates entirely in user space. All exploit payloads are executed in isolated temporary workspaces that are cleaned up after each attempt.
- No persistent changes — All files are removed after execution
- User space only — No kernel modules or system modifications
- Transparent — All actions are logged to the terminal
- Controlled — Selective execution prevents unwanted escalation
Contact
- Telegram: @rootwbot
- Author: @tebub (Sin7)
- Email: rootware@proton.me