skills.rest
florianbuetow
florianbuetowCOMMUNITY
Explore all skills by this author →
Website𝕏@bytetweetsGitHub

privilege-escalation

Analyzes source code for privilege escalation threats and vulnerabilities.

12|1|Updated Feb 9, 2026
Search Tags:#authorization#security#vulnerability assessment#access control#stride#privilege escalation
One-click install
npx skills add https://github.com/florianbuetow/claude-code --skill privilege-escalation
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: privilege-escalation
Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/privilege-escalation
Command: npx skills add https://github.com/florianbuetow/claude-code --skill privilege-escalation

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill identifies vulnerabilities where attackers can gain unauthorized capabilities or access within your application's source code, helping you secure your authorization mechanisms.

Core Features & Use Cases

  • Privilege Escalation Detection: Analyzes code for common flaws like missing access controls, IDOR, and JWT manipulation.
  • STRIDE Alignment: Maps findings to the Elevation of Privilege (E) threat category in the STRIDE model.
  • Use Case: A developer can use this Skill to audit an API endpoint suspected of allowing unauthorized users to access administrative functions, receiving specific refactoring suggestions.

Quick Start

Analyze the current project's source code for privilege escalation vulnerabilities.

Frequently Asked Questions about privilege-escalation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan source code for privilege escalation vulnerabilities?▼

To scan source code for privilege escalation vulnerabilities, you analyze route handlers, authorization middleware, and user management code to detect broken access control and unauthorized capability acquisition.

How do I detect IDOR and JWT manipulation flaws in API endpoints?▼

Detecting IDOR and JWT manipulation flaws in API endpoints requires analyzing route handlers and authorization middleware for missing function-level access control and unauthorized capability acquisition.

What is the STRIDE Elevation of Privilege threat category?▼

The STRIDE Elevation of Privilege (E) threat category maps software vulnerabilities where attackers acquire unauthorized capabilities, such as bypassing access controls or manipulating tokens.

Can I audit authorization middleware for broken access control automatically?▼

Yes, you can audit authorization middleware for broken access control by scanning user management code and route handlers to identify missing function-level access control flaws.

How do I fix missing function-level access control in my application?▼

Fixing missing function-level access control involves refactoring route handlers and authorization middleware based on specific vulnerability findings mapped to the STRIDE Elevation of Privilege category.

Related Skills

Explore More Software Engineering Skills→
pekralpekral

laravel-authorization-review

Audits Laravel route authorization chains for broken object-level access controls.

Community
Advanced
ollieb89ollieb89

auth-implementation-patterns

Implement JWT, OAuth2, and RBAC authentication across APIs and web apps.

Community
Advanced
PriyanshKuniyalPriyanshKuniyal

stride-analysis-patterns

Identify security threats across STRIDE categories for system threat modeling.

Community
Advanced
jassicsjassics
6

mobile-pentest

Automate MASTG-based mobile penetration tests on Android and iOS apps.

Community
Advanced