Enumerate Windows privilege escalation vectors via service misconfigurations and stored credentials.
npx skills add https://github.com/AeonDave/malskill --skill winpeas
Please help me install this Agent Skill. Skill: winpeas Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/privilege-escalation/winpeas Command: npx skills add https://github.com/AeonDave/malskill --skill winpeas
This Skill automates the process of identifying potential privilege escalation vulnerabilities on Windows systems, helping security professionals and red teamers quickly find misconfigurations and exploitable vectors.
Execute the winPEASx64.exe tool to begin privilege escalation enumeration.
High-intent search queries and answers about installing and using this skill.
Privilege escalation enumeration on Windows checks for service misconfigurations, unquoted service paths, AlwaysInstallElevated settings, and writable registry keys. It scans for exploitable vectors and stored credentials to identify paths from low-privilege user to administrator.
The best way to find stored credentials during Windows post-exploitation is running comprehensive enumeration scripts that scan for writable registry keys, token privileges, and service misconfigurations. This surfaces sensitive information and exploitable vectors to elevate privileges on the target machine.
To run winPEAS for checking unquoted service paths and AlwaysInstallElevated settings, execute the compiled winPEASx64.exe tool on the target Windows machine. This automates the enumeration of service misconfigurations and registry keys during post-exploitation.
Yes, Windows privilege escalation enumeration may trigger antivirus detection. Executing compiled .exe or PS1 enumeration scripts that scan for stored credentials, writable registry keys, and service misconfigurations often generates security alerts on protected systems.
Yes, you can use PS1 PowerShell scripts for Windows privilege escalation checks with low-privilege access. These scripts enumerate token privileges, service misconfigurations, and writable registry keys to identify potential vectors for elevating your permissions to administrator.
blacklanternsecurityCompile custom C and Go payloads to bypass antivirus and EDR detection.
blacklanternsecurityEnumerate Windows systems for local privilege escalation vectors and misconfigurations.
hardw00tSimulate attacker techniques across internal networks and Active Directory environments.
AndyAnh174Enumerate Windows systems and exploit privilege escalation vulnerabilities.
