linux-privilege-escalation
This skill guides you through methodical privilege escalation assessments on Linux systems, covering enumeration of kernel exploits, sudo misconfigurations, SUID binaries, capabilities, cron jobs, PATH hijacking, and NFS weaknesses. It provides workflows for identifying attack vectors and executing exploitation techniques to achieve root-level access from a low-privilege shell.
Linux Privilege Escalation identifies and exploits misconfigurations, vulnerable services, and kernel weaknesses to elevate from low-privilege to root access.
AI-generated summary based on this skill's SKILL.md
Decision gist · record as of 2026-07-26
Linux Privilege Escalation identifies and exploits misconfigurations, vulnerable services, and kernel weaknesses to elevate from low-privilege to root access. This skill guides you through methodical privilege escalation assessments on Linux systems, covering enumeration of kernel exploits, sudo misconfigurations, SUID binaries, capabilities, cron jobs, PATH hijacking, and NFS weaknesses. It provides workflows for identifying attack vectors and executing exploitation techniques to achieve root-level access from a low-privilege shell.
Use it when
- linux-privilege-escalation teaches you to enumerate SUID binaries and identify exploitation paths.
- Yes.
Verify before relying
Read SKILL.md below before installing (1 file). Open directory: indexed for reading, not audited.
Install
zebbern/claude-code-guide/linux-privilege-escalation · repository language: Python
Open directory. Skills are indexed for reading, not audited. Review a skill's body before installing it.
Frequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
What linux privilege escalation techniques does this skill cover?
linux-privilege-escalation guides you through methodical assessments covering enumeration of kernel exploits, sudo misconfigurations, SUID binaries, capabilities, cron jobs, PATH hijacking, and NFS weaknesses. The skill provides workflows for identifying attack vectors and executing exploitation techniques to achieve root-level access from a low-privilege shell.
How do I find and exploit SUID binaries on Linux?
linux-privilege-escalation teaches you to enumerate SUID binaries and identify exploitation paths. The skill covers techniques for discovering misconfigurations in SUID binaries, understanding how they can be leveraged for privilege escalation, and executing targeted exploits to gain elevated access.
Can linux-privilege-escalation help exploit sudo misconfiguration?
Yes. linux-privilege-escalation includes methods for identifying and exploiting sudo weaknesses. It covers analyzing sudoers configurations, finding commands executable without passwords, leveraging GTFOBins for sudo exploitation, and systematically testing sudo-based privilege escalation vectors.
What enumeration methods does linux-privilege-escalation provide?
linux-privilege-escalation covers comprehensive enumeration workflows for identifying privilege escalation opportunities. It guides you through kernel vulnerability detection, misconfiguration discovery, capabilities analysis, cron job inspection, and systematic reconnaissance using enumeration scripts and exploit suggesters.
How does linux-privilege-escalation help with cron job exploitation?
linux-privilege-escalation teaches you to identify and exploit cron job weaknesses for privilege escalation. The skill covers analyzing cron schedules, finding writable scripts or binaries executed by root, and executing PATH hijacking and other techniques to gain root-level access through cron job execution.
What privilege escalation vectors can linux-privilege-escalation help identify?
linux-privilege-escalation helps identify multiple privilege escalation vectors including kernel vulnerabilities, sudo misconfigurations, SUID binary weaknesses, capability exploits, cron job hijacking, PATH manipulation, NFS no_root_squash misconfigurations, and LD_PRELOAD injection techniques for comprehensive security assessment.
SKILL.md
Rendered from the published skill. Quoted content, verbatim.
Linux Privilege Escalation
Purpose
Execute systematic privilege escalation assessments on Linux systems to identify and exploit misconfigurations, vulnerable services, and security weaknesses that allow elevation from low-privilege user access to root-level control. This skill enables comprehensive enumeration and exploitation of kernel vulnerabilities, sudo misconfigurations, SUID binaries, cron jobs, capabilities, PATH hijacking, and NFS weaknesses.
Inputs / Prerequisites
Required Access
- Low-privilege shell access to target Linux system
- Ability to execute commands (interactive or semi-interactive shell)
- Network access for reverse shell
(truncated - see the full file via the links below)
File tree — 1 file
skills/linux-privilege-escalation/SKILL.md
Let your AI agent find skills like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 56,283 agent skills by what they can do, searchable in plain language.
wish › “Identify and exploit privilege escalation paths on Linux systems”
Give your agent the search over MCP, or paste the wish link into any chat. No install? Search from any chat →
Related skills
Privesc Linpeas runs comprehensive post-exploitation scans to uncover privilege escalation opportunities on Linux systems, checking for SUID/SGID binaries, sudo misconfigurations, exposed credentials, and kernel vulnerabilities. Results are color-coded by severity and mapped to exploitation techniques, enabling rapid identification of the highest-confidence escalation paths during authorized penetration tests and red team engagements.
This skill covers systematic Linux privilege escalation from low-privilege shell access to root. It walks through enumeration, SUID/SGID binary exploitation, capability abuse, cron job manipulation, NFS misconfigurations, writable system files, LD_PRELOAD tricks, Docker group abuse, and library hijacking—with specific commands and exploitation tables for each vector.
This skill covers systematic approaches to elevate from low-privilege shells to root or administrator access on compromised systems. It addresses both local escalation paths—such as exploiting misconfigured sudo, capabilities, and scheduled tasks on Linux—and Windows-specific vectors including token impersonation and service abuse. For domain environments, it includes Active Directory attacks like Kerberoasting, golden tickets, and credential harvesting via LLMNR poisoning.
Linux Pentester Practical Commands is a reference collection of command-line operations organized by penetration testing phase. It covers reconnaissance, enumeration, exploitation, privilege escalation, and post-exploitation workflows with real-world examples used in security assessments and CTF exercises.
Linux Discovery helps penetration testers systematically identify privilege escalation opportunities on Linux hosts through enumeration of system configuration, sudo settings, group memberships, and kernel vulnerabilities. The skill gathers baseline system information, analyzes user context and permissions, and maps exploitable vectors while respecting scope boundaries and engagement logging.
Mode Exploit structures your security research workflow from vulnerability analysis through exploit development and testing. It provides Python templates and common payload patterns to streamline writing exploits, proofs of concept, and reverse shells in a controlled lab environment.
More skills Linux Cron Service Abuse (GPL-3.0) · Linux Pentester Notes (NOASSERTION) · Linux Pentesting Commands (NOASSERTION) · Linux File Path Abuse (GPL-3.0) · Linux Sudo Suid Capabilities (GPL-3.0) · active-directory-attacks (MIT) · Network Netcat (NOASSERTION) · metasploit-framework (MIT)