skills.rest
zebbern
zebbernCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

Linux Privilege Escalation

Enumerate and exploit privilege escalation paths on Linux systems.

4.5k|458|Updated Jun 21, 2025
Search Tags:#Linux#enumeration#cron#privilege-escalation#security-testing#SUID#sudo
One-click install
npx skills add https://github.com/zebbern/claude-code-guide --skill linux-privilege-escalation
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Linux Privilege Escalation
Source: https://github.com/zebbern/claude-code-guide/tree/main/skills/linux-privilege-escalation
Command: npx skills add https://github.com/zebbern/claude-code-guide --skill linux-privilege-escalation

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security teams identify and securely assess Linux privilege escalation paths during authorized testing, reducing blind spots and manual trial-and-error.

Core Features & Use Cases

  • Systematic enumeration of privilege escalation vectors (sudo misconfigurations, SUID binaries, cron abuse, PATH hijacking, kernel vulnerabilities, capabilities)
  • Guided, safe testing workflow with documentation and remediation recommendations
  • Real-world use case: assess a multi-user Linux environment to verify that privilege escalation vectors are properly mitigated and logged

Quick Start

  1. Ensure you have written authorization and a controlled lab environment with Linux hosts.
  2. Perform baseline user enumeration (id, whoami, uname -a, groups, cat /etc/passwd) to establish the current context.
  3. Follow an approved privilege escalation workflow using safe tooling to enumerate and verify potential escalation paths, then document findings.

Frequently Asked Questions about Linux Privilege Escalation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify Linux privilege escalation paths using sudo misconfigurations and SUID binaries?▼

Identify Linux privilege escalation by systematically enumerating sudo misconfigurations, SUID binaries, and cron abuse vectors. This process requires a lab-ready Linux testing environment to safely perform structured enumeration and verify potential escalation paths.

What is PATH hijacking and how does it enable privilege escalation on Linux systems?▼

PATH hijacking is a privilege escalation technique that manipulates environment variables to execute malicious scripts with elevated privileges. It is assessed alongside kernel vulnerabilities and capabilities to verify if escalation vectors are properly mitigated in multi-user Linux environments.

How do I perform baseline enumeration before testing for Linux privilege escalation?▼

Perform baseline enumeration by executing commands like id, whoami, uname -a, groups, and cat /etc/passwd. This establishes your current user context and system information before following an approved privilege escalation workflow using safe tooling.

Can I use this privilege escalation testing workflow in a production multi-user Linux environment?▼

You can assess privilege escalation in a multi-user Linux environment to verify vectors are mitigated and logged. However, you must ensure written authorization and a controlled lab environment to safely perform structured enumeration and controlled exploitation.

What Linux cron abuse and kernel vulnerability vectors should I check during security testing?▼

During security testing, check Linux cron abuse, kernel vulnerabilities, capabilities, SUID binaries, and PATH hijacking. Systematic enumeration of these vectors reduces blind spots and manual trial-and-error when verifying privilege escalation mitigations.

Related Skills

Explore More Software Engineering Skills→
giosuetedeschi-specgiosuetedeschi-spec

Network 101

Configure and validate HTTP, HTTPS, SNMP, and SMB services on Windows and Linux.

Community
Intermediate
chainreactorschainreactors
482

privesc

Enumerate privilege escalation vectors on Linux and Windows systems.

Official
Intermediate
blacklanternsecurityblacklanternsecurity
253

linux-sudo-suid-capabilities

Exploit Linux sudo misconfigurations, SUID binaries, and capabilities for privilege escalation.

Official
Advanced
Prohao42Prohao42
120

linux-privilege-escalation

Identify Linux privilege escalation vectors via SUID/SGID, capabilities, cron jobs, and kernel exploits.

Community
Advanced