windows-privilege-escalation

Guide Windows privilege escalation via token manipulation, service misconfigurations, DLL hijacking, UAC bypass, and registry autoruns.

Updated Jun 11, 2026
One-click install
npx skills add https://github.com/utsavthakur/agenticskills --skill windows-privilege-escalation-utsavthakur
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: windows-privilege-escalation
Source: https://github.com/utsavthakur/agenticskills/tree/main/windows-privilege-escalation
Command: npx skills add https://github.com/utsavthakur/agenticskills --skill windows-privilege-escalation-utsavthakur

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive guide to escalate privileges on Windows systems, offering detailed techniques and tools for attackers with low-privilege access.

Core Features & Use Cases

  • Privilege Escalation: Offers a wide range of methods to escalate privileges, including token manipulation, service misconfigurations, DLL hijacking, UAC bypass, and registry autoruns.
  • Expert Attack Playbook: Covers advanced Windows privesc techniques, suitable for expert attackers who need nuanced privilege prerequisites and OS-version-specific constraints.
  • Use Case: If you have a low-privilege shell on a Windows system and need to escalate your privileges, this Skill provides the necessary techniques and tools.

Quick Start

Load the 'windows-privilege-escalation' skill to access the expert Windows privesc techniques.

Frequently Asked Questions about windows-privilege-escalation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I escalate privileges on Windows with low-privilege access?

You can escalate Windows privileges from low-privilege access by exploiting service misconfigurations, token manipulation, DLL hijacking, UAC bypass, and registry autoruns using advanced system internals and attack primitives.

What advanced Windows privilege escalation techniques work for bypassing UAC?

Advanced Windows UAC bypass techniques include token manipulation, DLL hijacking, and exploiting registry autoruns. These methods require expert knowledge of system internals and OS-version-specific constraints.

Can I use DLL hijacking and service misconfigurations for Windows privilege escalation?

Yes, DLL hijacking and service misconfigurations are core techniques for Windows privilege escalation. They enable attackers with low-privilege access to execute payloads and escalate privileges on target Windows systems.

What prerequisites are needed to perform token manipulation on Windows systems?

Performing token manipulation on Windows requires expert knowledge of system internals and attack primitives. You must have low-privilege access to the target Windows system and understand OS-version-specific constraints.

When should I use registry autoruns instead of UAC bypass for privilege escalation?

Use registry autoruns for privilege escalation when targeting persistence mechanisms across reboots, whereas UAC bypass suits immediate administrative access. Both require expert knowledge of Windows system internals.