Detects and analyzes local privilege escalation vulnerabilities in operating systems.
npx skills add https://github.com/alicangnll/Spectra --skill lpe-detection
Please help me install this Agent Skill. Skill: LPE Detection Source: https://github.com/alicangnll/Spectra/tree/main/spectra/skills/builtins/lpe-detection Command: npx skills add https://github.com/alicangnll/Spectra --skill lpe-detection
This Skill systematically identifies Local Privilege Escalation (LPE) vulnerabilities in operating systems, allowing for the detection of potential security breaches and the safeguarding of sensitive information.
Run the LPE Detection Skill on your system to identify any LPE vulnerabilities.
High-intent search queries and answers about installing and using this skill.
To detect Local Privilege Escalation vulnerabilities, the system systematically analyzes kernel drivers, Windows and Linux services, SUID/SGID binaries, and file permissions to identify potential security breaches and misconfigurations.
Service privilege escalation misconfigurations include vulnerable cron jobs, Windows Task Scheduler tasks, PATH hijacking, and DLL hijacking vulnerabilities, which are identified by enumerating Windows and Linux services for insecure setups.
Kernel vulnerability detection assesses exploitability by analyzing kernel drivers and modules for potential weaknesses, providing detailed reports on whether identified issues can be practically exploited.
Yes, it identifies SUID and SGID binaries that could be exploited for privilege escalation, analyzing their configurations and permissions to assess potential abuse vectors.
Yes, the vulnerability detection process includes payload generation, creating payloads for potential kernel exploits and service hijackings to demonstrate the exploitability of identified weaknesses.
The best way to analyze weak file permissions is to systematically scan and evaluate file access controls, identifying configurations that could allow unauthorized privilege escalation or exploitation.
rampstackcoEstablish a security baseline for websites and web apps.
cmndcntrlcyberScan web applications for business logic vulnerabilities and generate security reports.
zebbernEnumerate and exploit privilege escalation paths on Linux systems.
blacklanternsecurityExploit Windows service misconfigurations and DLL hijacking for privilege escalation.
