lockpick

Name: lockpick
Availability: InStock
Author: iuliandita

Guides Linux, containerized, and Kubernetes privilege escalation and post-exploitation for authorized security testing.

2|Updated Apr 6, 2026

Search Tags:#security #kubernetes #linux #privilege escalation #post-exploitation #pentest

Ready to run

npx skills add https://github.com/iuliandita/skills --skill lockpick

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: lockpick
Source: https://github.com/iuliandita/skills/tree/main/skills/lockpick
Command: npx skills add https://github.com/iuliandita/skills --skill lockpick

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill provides a structured, reliable methodology for privilege escalation and post-exploitation during authorized security assessments, CTFs, and penetration testing engagements.

Core Features & Use Cases

Privilege Escalation: Guides the user through Linux, container, and Kubernetes privilege escalation paths using proven techniques.
Post-Exploitation: Facilitates credential harvesting, lateral movement, and pivoting within authorized environments.
Use Case: During a penetration test, use this skill to systematically enumerate SUID binaries, container breakout vectors, or Kubernetes RBAC misconfigurations to escalate from a low-privileged shell to root or cluster-admin.

Quick Start

Use the lockpick skill to perform a systematic privilege escalation assessment on the current Linux target.

Frequently Asked Questions about lockpick

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform privilege escalation on a Linux target during a pentest?▼

Privilege escalation on Linux involves systematically enumerating SUID binaries, misconfigurations, and kernel vulnerabilities to escalate from a low-privileged shell to root. This skill provides a structured methodology to guide that enumeration and exploitation process.

Can I use this to enumerate Kubernetes RBAC misconfigurations for cluster-admin access?▼

Yes, Kubernetes privilege escalation is supported. You can systematically enumerate Kubernetes RBAC misconfigurations to identify vectors for escalating privileges from a standard service account to cluster-admin within an authorized testing environment.

What is the best way to find container breakout vectors during post-exploitation?▼

Finding container breakout vectors requires enumerating container configurations and capabilities to identify escape paths to the host system. This skill facilitates post-exploitation by guiding users through proven container escape techniques.

Does this framework support credential harvesting and lateral movement in authorized assessments?▼

Yes, credential harvesting and lateral movement are supported post-exploitation features. The framework facilitates pivoting within authorized environments, allowing you to extract credentials and move laterally across compromised systems.

What are the safety protocols for using privilege escalation techniques in red team exercises?▼

Strict adherence to authorization boundaries and safety protocols is required. The framework is designed exclusively for authorized penetration testing, CTF challenges, and red team exercises to ensure responsible security testing.

Why do I need a systematic methodology for post-exploitation and privilege escalation?▼

A systematic methodology ensures reliable enumeration and exploitation of privilege escalation paths across Linux, containerized, and Kubernetes environments. It provides a structured framework to prevent missing critical vulnerabilities during security assessments.