skills.rest
AndyAnh174
AndyAnh174COMMUNITY
Explore all skills by this author →
WebsiteGitHub

Windows Privilege Escalation

Enumerate Windows systems and exploit privilege escalation vulnerabilities.

Updated Jan 8, 2026
Search Tags:#security#exploitation#privilege escalation#pentesting#windows#enumeration
One-click install
npx skills add https://github.com/AndyAnh174/BanThuoc-SEO --skill windows-privilege-escalation-andyanh174
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Windows Privilege Escalation
Source: https://github.com/AndyAnh174/BanThuoc-SEO/tree/main/.agent/skills/windows-privilege-escalation
Command: npx skills add https://github.com/AndyAnh174/BanThuoc-SEO --skill windows-privilege-escalation-andyanh174

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a systematic approach to discover and exploit vulnerabilities that allow a user to gain elevated privileges (Administrator or SYSTEM) on a Windows system.

Core Features & Use Cases

  • System Enumeration: Gathers detailed information about the Windows environment, users, groups, network, and services.
  • Credential Harvesting: Identifies and extracts sensitive information like passwords, hashes, and tokens from various sources.
  • Exploitation Techniques: Covers exploiting misconfigured services, unquoted paths, AlwaysInstallElevated, token impersonation, and kernel vulnerabilities.
  • Use Case: During a penetration test, after gaining initial access as a standard user, this Skill can be used to find a path to Administrator privileges to access sensitive system configurations or data.

Quick Start

Use the Windows Privilege Escalation skill to enumerate the current system for potential privilege escalation vectors.

Frequently Asked Questions about Windows Privilege Escalation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enumerate a Windows system for privilege escalation vectors after getting initial access?▼

Windows privilege escalation relies on system enumeration to gather detailed information about the environment, users, groups, network, and services. This systematic analysis identifies misconfigurations and vulnerabilities to exploit for elevated privileges.

What techniques are used for Windows privilege escalation during a pentest?▼

Common Windows privilege escalation techniques include credential harvesting, exploiting misconfigured services, token impersonation, and leveraging kernel vulnerabilities. These methods extract sensitive information like passwords and hashes to gain Administrator or SYSTEM access.

Do I need initial access as a standard user to perform Windows privilege escalation?▼

Yes, Windows privilege escalation requires initial access as a standard user. You start with this baseline access and use enumeration tools to systematically analyze the system for vulnerabilities that allow elevation to Administrator or SYSTEM.

What is credential harvesting in the context of Windows exploitation?▼

Credential harvesting is a Windows exploitation technique that identifies and extracts sensitive information like passwords, hashes, and tokens from various system sources. This data is then used to authenticate as a higher-privileged user.

How does token impersonation work for gaining SYSTEM privileges on Windows?▼

Token impersonation is a privilege escalation technique that manipulates Windows security tokens to adopt the security context of another user. By exploiting misconfigured services, an attacker can impersonate SYSTEM level access.

Can I exploit unquoted service paths for Windows privilege escalation?▼

Yes, exploiting unquoted service paths is a recognized Windows privilege escalation technique. When a service path contains spaces and lacks quotes, you can place a malicious executable in a traversed directory to execute it with elevated service privileges.

Related Skills

Explore More Software Engineering Skills→
zebbernzebbern
34

OSCP Penetration Testing Methodology

Provides OSCP-standard penetration methodology across Windows, Linux, and Active Directory environments.

Community
Advanced
NightreaverNightreaver
6

ssh_sudo_read_redacted

Read files with sudo privileges and redact secrets using HMAC-SHA256 hashing.

Community
Advanced
AeonDaveAeonDave
15

winpeas

Enumerate Windows privilege escalation vectors via service misconfigurations and stored credentials.

Community
Intermediate
alicangnllalicangnll

Linux Driver Exploit

Identify and exploit Linux kernel module vulnerabilities for privilege escalation.

Community
Advanced