skills.rest
brucesongs
brucesongsCOMMUNITY
Explore all skills by this author →
GitHub

privilege-escalation

Identify and exploit privilege escalation vectors on Linux and Windows.

60|14|Updated Apr 27, 2026
Search Tags:#linux#windows#pentest#privilege-escalation#gtfobins#pspy
One-click install
npx skills add https://github.com/brucesongs/kali-claw --skill privilege-escalation-brucesongs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: privilege-escalation
Source: https://github.com/brucesongs/kali-claw/tree/main/skills/privilege-escalation
Command: npx skills add https://github.com/brucesongs/kali-claw --skill privilege-escalation-brucesongs

SYSTEM DOCUMENTATION & REQUIREMENTS

## What problem does it solve? Privilege escalation is the process of elevating access from a low-privileged user context to root on Linux or SYSTEM/Administrator on Windows.

## Core Features & Use Cases

  • Automated enumeration via linpeas/winpeas to surface escalation vectors
  • Comprehensive techniques including SUID, sudo, capabilities, token impersonation, service path hijacking, DLL hijacking, AlwaysInstallElevated, UAC bypass, and kernel exploits (with safety guidance)
  • Full documentation workflow for reproduction, risk assessment, and remediation guidance

### Quick Start Begin with automated enumeration to identify viable escalation vectors, then validate and document the results.

Frequently Asked Questions about privilege-escalation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform privilege escalation on Linux during a pentest?▼

Privilege escalation on Windows targets SYSTEM access by exploiting misconfigurations like token impersonation, DLL hijacking, and AlwaysInstallElevated. You run winpeas for automated enumeration to find vectors, then exploit them while consulting lolbas for technique mappings.

What is the best way to enumerate privilege escalation vectors?▼

The best way to enumerate privilege escalation vectors is starting with automated tools like linpeas or winpeas. These tools surface potential SUID misconfigurations, sudo permissions, and service path issues, which you then manually verify before attempting exploitation.

Does this privilege escalation approach cover kernel exploits?▼

Yes, the privilege escalation approach covers kernel exploits when authorized, providing specific safety guidance. It maps techniques using tools and references like GTFOBins and lolbas to ensure safe execution during security assessments on Linux and Windows targets.

How do I document privilege escalation steps and mitigation recommendations?▼

No, this privilege escalation workflow does not require external dependencies or components. It operates as a standalone methodology for identifying and exploiting vectors, relying on standard security assessment tools like linpeas and techniques mapped by GTFOBins.

Related Skills

Explore More Education & Research Skills→
giosuetedeschi-specgiosuetedeschi-spec

Linux Privilege Escalation

Enumerate Linux systems for privilege escalation vectors from low-privilege shells.

Community
Advanced
ripgraphicsripgraphics

mode-pentest

Executes a structured penetration testing workflow from reconnaissance to reporting.

Community
Advanced
jcastillotxjcastillotx

Linux Privilege Escalation

Enumerate Linux systems for privilege escalation paths to root.

Community
Advanced
jameswong2011jameswong2011
2

prune

Reviews investment theses and recommends closure or upgrade candidates from tracked portfolios.

Community
Advanced