privesc

Enumerate privilege escalation vectors on Linux and Windows systems.

482|68|Updated Sep 5, 2023
One-click install
npx skills add https://github.com/chainreactors/malice-network --skill privesc
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: privesc
Source: https://github.com/chainreactors/malice-network/tree/main/helper/intl/community/resources/skills/privesc
Command: npx skills add https://github.com/chainreactors/malice-network --skill privesc

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Enumerate privilege escalation vectors on a target system for defensive assessment, helping identify potential misuse paths without performing exploits.

Core Features & Use Cases

  • Linux checks include Sudo, SUID/SGID, Capabilities, Writable paths, Cron jobs, Kernel, Services, and Docker/LXD surface checks.
  • Windows checks cover token privileges, unquoted service paths, writable service binaries, AlwaysInstallElevated, stored credentials, scheduled tasks, and UAC level assessments.
  • Output guidance: produce a structured report with risk ratings for each finding and a final prioritized summary.

Quick Start

Run the privesc discovery against the target to enumerate privilege escalation vectors and report findings.

Frequently Asked Questions about privesc

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enumerate privilege escalation vectors on Linux and Windows?

To enumerate privilege escalation vectors, you run a discovery scan against the target system. This identifies potential misuse paths across Linux and Windows environments without performing exploitation.

What Linux checks are included in a privilege escalation discovery assessment?

A privilege escalation discovery assessment checks Linux systems for Sudo, SUID/SGID, Capabilities, writable paths, Cron jobs, Kernel, Services, and Docker/LXD surface vulnerabilities.

Does this privilege escalation assessment exploit the vulnerabilities it finds?

No, this privilege escalation assessment is discovery-focused and does not perform exploits. It solely identifies potential privilege abuse paths and documents findings with severity ratings.

What Windows privilege escalation vectors does this security assessment check?

This security assessment checks Windows for token privileges, unquoted service paths, writable service binaries, AlwaysInstallElevated, stored credentials, scheduled tasks, and UAC levels.

How do I report privilege escalation findings with risk ratings?

To report privilege escalation findings, the assessment outputs structured results with severity ratings for each finding and generates a final prioritized risk summary for defensive review.