skills.rest
ersinkoc
ersinkocCOMMUNITY
Explore all skills by this author →
Website𝕏@ersinkocGitHub

sc-privilege-escalation

Detect privilege escalation vectors in RBAC and JWT-based applications.

56|5|Updated Apr 8, 2026
Search Tags:#authorization#security#authentication#vulnerability#jwt#rbac#privilege-escalation
One-click install
npx skills add https://github.com/ersinkoc/security-check --skill sc-privilege-escalation
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sc-privilege-escalation
Source: https://github.com/ersinkoc/security-check/tree/main/skills/sc-privilege-escalation
Command: npx skills add https://github.com/ersinkoc/security-check --skill sc-privilege-escalation

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Privilege escalation is a critical class of security risk where legitimate users or attackers can elevate access by manipulating roles, JWT claims, or admin endpoints. This Skill helps teams detect such vectors across code, configs, and deployment patterns.

Core Features & Use Cases

  • Detects role manipulation via request bodies and API endpoints
  • Validates server-side enforcement of RBAC and excludes client-trusted role data
  • Identifies JWT role claim tampering and missing server-side checks
  • Flags default/test admin accounts and insecure admin routes
  • Provides remediation guidance and concrete test patterns

Quick Start

Run the sc-privilege-escalation scanner against your codebase to identify RBAC and JWT-based privilege weaknesses.

Frequently Asked Questions about sc-privilege-escalation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect privilege escalation vulnerabilities in my application code?▼

Detect privilege escalation vulnerabilities by scanning your codebase for role manipulation, admin endpoint bypasses, and RBAC circumvention. The scanner analyzes authentication and authorization configurations to identify insecure routes and missing server-side checks.

How does JWT role claim tampering lead to privilege escalation?▼

JWT role claim tampering causes privilege escalation when attackers modify token claims to gain higher access. This happens if the application trusts client-side role data without verifying server-side enforcement, allowing unauthorized admin actions.

How do I verify server-side enforcement of RBAC in my application?▼

Verify server-side enforcement of RBAC by analyzing middleware-based access checks and ensuring role propagation is validated. The scanner confirms that authorization logic excludes client-trusted role data and enforces permissions on protected endpoints.

Can I scan for default admin accounts and insecure endpoints in my RBAC configuration?▼

Yes, you can scan for default admin accounts and insecure endpoints in RBAC configurations. The tool flags test accounts and insecure admin routes, providing actionable remediation guidance and concrete test patterns to fix them.

What are common limitations when scanning for role manipulation in APIs?▼

Limitations when scanning for role manipulation include relying solely on client-side checks or missing server-side validation. The scanner mitigates this by excluding client-trusted role data and focusing on server-side RBAC and JWT verification.

Related Skills

Explore More Software Engineering Skills→
henriqueatilahenriqueatila
3

golang-gin-auth

Implement JWT authentication and RBAC authorization for Go Gin APIs.

Community
Advanced
zebbernzebbern
4.5k

Windows Privilege Escalation

Enumerate Windows privileges and misconfigurations to identify privilege escalation vectors.

Community
Advanced
bugrabilgebugrabilge
10

vulnerability-scanner

Detect security vulnerabilities in code, running apps, and dependencies.

Community
Advanced
cenjiecenjie

penetration-testing

Identify and validate security vulnerabilities through simulated attacks on applications and networks.

Community
Advanced