privesc

What problem does it solve?

Enumerate privilege escalation vectors on a target system for defensive assessment, helping identify potential misuse paths without performing exploits.

Core Features & Use Cases

• Linux checks include Sudo, SUID/SGID, Capabilities, Writable paths, Cron jobs, Kernel, Services, and Docker/LXD surface checks.
• Windows checks cover token privileges, unquoted service paths, writable service binaries, AlwaysInstallElevated, stored credentials, scheduled tasks, and UAC level assessments.
• Output guidance: produce a structured report with risk ratings for each finding and a final prioritized summary.

Quick Start

Run the privesc discovery against the target to enumerate privilege escalation vectors and report findings.