privesc

Name: privesc
Availability: InStock
Author: chainreactors

Enumerate privilege escalation vectors on Linux and Windows systems.

482|68|Updated Sep 5, 2023

Search Tags:#discovery #linux #windows #privilege-escalation #security-assessment #risk-report

Ready to run

npx skills add https://github.com/chainreactors/malice-network --skill privesc

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: privesc
Source: https://github.com/chainreactors/malice-network/tree/main/helper/intl/community/resources/skills/privesc
Command: npx skills add https://github.com/chainreactors/malice-network --skill privesc

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Enumerate privilege escalation vectors on a target system for defensive assessment, helping identify potential misuse paths without performing exploits.

Core Features & Use Cases

Linux checks include Sudo, SUID/SGID, Capabilities, Writable paths, Cron jobs, Kernel, Services, and Docker/LXD surface checks.
Windows checks cover token privileges, unquoted service paths, writable service binaries, AlwaysInstallElevated, stored credentials, scheduled tasks, and UAC level assessments.
Output guidance: produce a structured report with risk ratings for each finding and a final prioritized summary.

Quick Start

Run the privesc discovery against the target to enumerate privilege escalation vectors and report findings.

Frequently Asked Questions about privesc

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I enumerate privilege escalation vectors on Linux and Windows?▼

To enumerate privilege escalation vectors, you run a discovery scan against the target system. This identifies potential misuse paths across Linux and Windows environments without performing exploitation.

What Linux checks are included in a privilege escalation discovery assessment?▼

A privilege escalation discovery assessment checks Linux systems for Sudo, SUID/SGID, Capabilities, writable paths, Cron jobs, Kernel, Services, and Docker/LXD surface vulnerabilities.

Does this privilege escalation assessment exploit the vulnerabilities it finds?▼

No, this privilege escalation assessment is discovery-focused and does not perform exploits. It solely identifies potential privilege abuse paths and documents findings with severity ratings.

What Windows privilege escalation vectors does this security assessment check?▼

This security assessment checks Windows for token privileges, unquoted service paths, writable service binaries, AlwaysInstallElevated, stored credentials, scheduled tasks, and UAC levels.

How do I report privilege escalation findings with risk ratings?▼

To report privilege escalation findings, the assessment outputs structured results with severity ratings for each finding and generates a final prioritized risk summary for defensive review.