skills.rest
rahmatullahboss
rahmatullahbossCOMMUNITY
Explore all skills by this author →
GitHub

Windows Privilege Escalation

Detect and exploit privilege escalation paths in Windows environments.

Updated Jan 4, 2026
Search Tags:#penetration testing#privilege escalation#windows#credential harvesting#token impersonation#service exploitation
One-click install
npx skills add https://github.com/rahmatullahboss/multi-store-saas --skill windows-privilege-escalation-rahmatullahboss
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Windows Privilege Escalation
Source: https://github.com/rahmatullahboss/multi-store-saas/tree/main/.agent/skills/Windows%20Privilege%20Escalation
Command: npx skills add https://github.com/rahmatullahboss/multi-store-saas --skill windows-privilege-escalation-rahmatullahboss

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides systematic guidance for identifying and exploiting privilege escalation vulnerabilities on Windows systems, aiding security assessments and penetration testing.

Core Features & Use Cases

  • System Enumeration: Gather information about Windows version, user accounts, services, and configurations to identify potential privilege escalation points.
  • Credential Harvesting: Extract hashes, passwords, and sensitive credentials stored in files, registry, or shadow copies to facilitate escalation.
  • Service Exploitation: Detect misconfigured services and unquoted paths that can be exploited to gain higher privileges or execute malicious code.
  • Token Impersonation: Leverage token privileges and tools like JuicyPotato or RoguePotato to impersonate higher-privilege tokens and spawn elevated shells.
  • Kernel Exploitation: Identify applicable kernel vulnerabilities and utilize exploits to escalate privileges or achieve code execution at kernel level.

Quick Start

Perform system enumeration and look for misconfigurations or vulnerable services, then use token impersonation techniques such as JuicyPotato to obtain SYSTEM privileges.

Frequently Asked Questions about Windows Privilege Escalation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform Windows privilege escalation during a penetration test?▼

Windows privilege escalation involves system enumeration to find misconfigurations, credential harvesting, service exploitation, and token impersonation to elevate privileges. You start by gathering information about the Windows version, user accounts, and services to identify potential weak points.

What is token impersonation and how does JuicyPotato work on Windows?▼

Token impersonation leverages token privileges to impersonate higher-privilege tokens and spawn elevated shells. Tools like JuicyPotato or RoguePotato exploit these token privileges to obtain SYSTEM privileges during a Windows security assessment.

How do I exploit misconfigured Windows services for privilege escalation?▼

Exploiting misconfigured services involves detecting unquoted service paths that can be manipulated to execute malicious code. By targeting these weak configurations, you can gain higher privileges on the Windows system.

Can I extract credentials from shadow copies on Windows?▼

Yes, credential harvesting extracts hashes, passwords, and sensitive credentials stored in files, the registry, or shadow copies. This facilitates privilege escalation by providing valid authentication data for higher-privilege accounts.

When do I need to use kernel exploitation for Windows privilege escalation?▼

Kernel exploitation is needed when you must identify applicable kernel vulnerabilities to achieve code execution at the kernel level. This approach escalates privileges or bypasses standard system restrictions when user-level vectors fail.

Does this privilege escalation methodology work on any Windows environment?▼

The methodology applies to Windows environments where penetration testers need to assess security weak points. Effectiveness depends on system enumeration findings, specific Windows versions, and existing configurations like vulnerable services or token privileges.

Related Skills

Explore More Software Engineering Skills→
AeonDaveAeonDave
15

winpeas

Enumerate Windows privilege escalation vectors via service misconfigurations and stored credentials.

Community
Intermediate
AcczdyAcczdy
2

conducting-internal-network-penetration-test

Simulate internal network penetration tests to reveal lateral movement and privilege escalation paths.

Community
Advanced
AeonDaveAeonDave
15

cain-and-abel

Recovers Windows passwords by sniffing network traffic and cracking hash types.

Community
Intermediate
zebbernzebbern
34

OSCP Penetration Testing Methodology

Provides OSCP-standard penetration methodology across Windows, Linux, and Active Directory environments.

Community
Advanced