skillfed

linux-privilege-escalation

This skill guides you through methodical privilege escalation assessments on Linux systems, covering enumeration of kernel exploits, sudo misconfigurations, SUID binaries, capabilities, cron jobs, PATH hijacking, and NFS weaknesses. It provides workflows for identifying attack vectors and executing exploitation techniques to achieve root-level access from a low-privilege shell.

Linux Privilege Escalation identifies and exploits misconfigurations, vulnerable services, and kernel weaknesses to elevate from low-privilege to root access.

AI-generated summary based on this skill's SKILL.md

4,440 447 MIT updated by zebbern

Install

zebbern/claude-code-guide/linux-privilege-escalation · repository language: Python

git clone https://github.com/zebbern/claude-code-guide
cp -r claude-code-guide/skills/linux-privilege-escalation ~/.claude/skills/linux-privilege-escalation
npx skillfed install zebbern/claude-code-guide/linux-privilege-escalation

Frequently asked questions

AI-generated answers based on this skill's SKILL.md and metadata

What linux privilege escalation techniques does this skill cover?

linux-privilege-escalation guides you through methodical assessments covering enumeration of kernel exploits, sudo misconfigurations, SUID binaries, capabilities, cron jobs, PATH hijacking, and NFS weaknesses. The skill provides workflows for identifying attack vectors and executing exploitation techniques to achieve root-level access from a low-privilege shell.

How do I find and exploit SUID binaries on Linux?

linux-privilege-escalation teaches you to enumerate SUID binaries and identify exploitation paths. The skill covers techniques for discovering misconfigurations in SUID binaries, understanding how they can be leveraged for privilege escalation, and executing targeted exploits to gain elevated access.

Can linux-privilege-escalation help exploit sudo misconfiguration?

Yes. linux-privilege-escalation includes methods for identifying and exploiting sudo weaknesses. It covers analyzing sudoers configurations, finding commands executable without passwords, leveraging GTFOBins for sudo exploitation, and systematically testing sudo-based privilege escalation vectors.

What enumeration methods does linux-privilege-escalation provide?

linux-privilege-escalation covers comprehensive enumeration workflows for identifying privilege escalation opportunities. It guides you through kernel vulnerability detection, misconfiguration discovery, capabilities analysis, cron job inspection, and systematic reconnaissance using enumeration scripts and exploit suggesters.

How does linux-privilege-escalation help with cron job exploitation?

linux-privilege-escalation teaches you to identify and exploit cron job weaknesses for privilege escalation. The skill covers analyzing cron schedules, finding writable scripts or binaries executed by root, and executing PATH hijacking and other techniques to gain root-level access through cron job execution.

What privilege escalation vectors can linux-privilege-escalation help identify?

linux-privilege-escalation helps identify multiple privilege escalation vectors including kernel vulnerabilities, sudo misconfigurations, SUID binary weaknesses, capability exploits, cron job hijacking, PATH manipulation, NFS no_root_squash misconfigurations, and LD_PRELOAD injection techniques for comprehensive security assessment.

SKILL.md

rendered from the published skill — quoted content, verbatim

Linux Privilege Escalation

Purpose

Execute systematic privilege escalation assessments on Linux systems to identify and exploit misconfigurations, vulnerable services, and security weaknesses that allow elevation from low-privilege user access to root-level control. This skill enables comprehensive enumeration and exploitation of kernel vulnerabilities, sudo misconfigurations, SUID binaries, cron jobs, capabilities, PATH hijacking, and NFS weaknesses.

Inputs / Prerequisites

Required Access
  • Low-privilege shell access to target Linux system
  • Ability to execute commands (interactive or semi-interactive shell)
  • Network access for reverse shell

(truncated - see the full file via the links below)

Read as markdown · JSON record · Browse the source repository

File tree — 1 file
skills/linux-privilege-escalation/SKILL.md

Related skills

Tags

post-exploitation privilege-elevation system-hardening vulnerability-assessment penetration-testing kernel-exploitation access-control-bypass lateral-movement