Linux Privilege Escalation

Enumerate Linux systems and exploit vulnerabilities to escalate privileges to root.

Updated Apr 6, 2026
One-click install
npx skills add https://github.com/gerald-ica/dev-tool-configs --skill linux-privilege-escalation-gerald-ica
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Linux Privilege Escalation
Source: https://github.com/gerald-ica/dev-tool-configs/tree/main/gemini/skills/linux-privilege-escalation
Command: npx skills add https://github.com/gerald-ica/dev-tool-configs --skill linux-privilege-escalation-gerald-ica

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill is designed to help users find and exploit vulnerabilities on Linux systems to gain root access from a low-privilege shell.

Core Features & Use Cases

  • System Enumeration: Gather information about the target system for vulnerability research.
  • Automated Enumeration: Use scripts to perform comprehensive enumeration of the system.
  • Kernel Exploits: Identify and exploit kernel vulnerabilities for privilege escalation.
  • Sudo Exploitation: Enumerate sudo privileges and exploit misconfigurations.
  • SUID Binary Exploitation: Find and exploit SUID binaries for privilege escalation.
  • Capabilities Exploitation: Exploit capabilities to gain root access.
  • Cron Job Exploitation: Exploit cron jobs for root access.
  • PATH Hijacking: Hijack the PATH variable to exploit SUID binaries.
  • NFS Exploitation: Exploit NFS to gain root access.
  • Use Case: A penetration tester needs to escalate privileges on a Linux system during a security audit.

Quick Start

Run the Linux Privilege Escalation Skill on the target system to start the privilege escalation process.

Frequently Asked Questions about Linux Privilege Escalation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I escalate privileges on Linux from a low-privilege user to root?

Linux privilege escalation involves exploiting system vulnerabilities like kernel flaws, sudo misconfigurations, SUID binaries, and cron jobs to gain root access. You must first enumerate the target system to identify exploitable weaknesses before executing the privilege escalation attack.

What is Linux privilege escalation and how does it work?

Linux privilege escalation is the process of gaining root access from a low-privilege shell by exploiting system misconfigurations or vulnerabilities. It works by identifying weaknesses like SUID binaries, sudo rights, or kernel exploits, and leveraging them to execute commands with elevated permissions.

How do I enumerate a Linux system for privilege escalation vulnerabilities?

You enumerate a Linux system for privilege escalation by gathering system information and running automated scripts to identify sudo misconfigurations, SUID binaries, capabilities, and cron jobs. This comprehensive enumeration reveals potential vectors for escalating to root access.

Can I exploit sudo misconfigurations and SUID binaries to gain root access on Linux?

Yes, you can exploit sudo misconfigurations and SUID binaries to gain root access on Linux. By enumerating sudo privileges and finding SUID binaries, you can leverage misconfigured permissions or PATH hijacking to execute commands with elevated root privileges.

What are the best ways to exploit cron jobs and NFS weaknesses for root access?

The best ways to exploit cron jobs and NFS weaknesses for root access involve identifying exploitable scheduled tasks and network file system configurations. You can exploit cron jobs by manipulating scheduled scripts, and exploit NFS by leveraging weak export configurations to write root-level files.

Do I need manual input to exploit Linux kernel vulnerabilities during a security audit?

Yes, exploiting Linux kernel vulnerabilities requires manual input and execution on the target system. The process involves identifying specific kernel flaws during system enumeration and manually applying the appropriate exploits to escalate from a low-privilege user to root.