privilege-escalation-methods
This skill covers systematic approaches to elevate from low-privilege shells to root or administrator access on compromised systems. It addresses both local escalation paths—such as exploiting misconfigured sudo, capabilities, and scheduled tasks on Linux—and Windows-specific vectors including token impersonation and service abuse. For domain environments, it includes Active Directory attacks like Kerberoasting, golden tickets, and credential harvesting via LLMNR poisoning.
Privilege Escalation Methods teaches techniques for gaining root or administrator access on Linux and Windows systems during post-exploitation.
AI-generated summary based on this skill's SKILL.md
Decision gist · record as of 2026-07-26
Privilege Escalation Methods teaches techniques for gaining root or administrator access on Linux and Windows systems during post-exploitation. This skill covers systematic approaches to elevate from low-privilege shells to root or administrator access on compromised systems. It addresses both local escalation paths—such as exploiting misconfigured sudo, capabilities, and scheduled tasks on Linux—and Windows-specific vectors including token impersonation and service abuse. For domain environments, it includes Active Directory attacks like Kerberoasting, golden tickets, and credential harvesting via LLMNR poisoning.
Use it when
- privilege-escalation-methods addresses Windows-specific escalation vectors including token impersonation exploits, service abuse.
- privilege-escalation-methods includes domain-focused escalation techniques such as Kerberoasting to harvest service account credentials.
Verify before relying
Read SKILL.md below before installing (1 file). Open directory: indexed for reading, not audited.
Install
zebbern/claude-code-guide/privilege-escalation-methods · repository language: Python
Open directory. Skills are indexed for reading, not audited. Review a skill's body before installing it.
Frequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How to escalate privileges on Linux systems?
privilege-escalation-methods covers systematic local escalation paths on Linux, including exploiting misconfigured sudo binaries, abusing SUID setuid binaries, leveraging cron job misconfigurations, and manipulating capabilities. The skill examines how to identify and chain these vectors from a low-privilege shell to achieve root access on compromised systems.
What Windows privilege escalation techniques does this skill teach?
privilege-escalation-methods addresses Windows-specific escalation vectors including token impersonation exploits, service abuse, and SeBackupPrivilege misuse. It covers post-exploitation methods to transition from initial shell access to administrator or SYSTEM-level privileges on compromised Windows hosts.
What Active Directory attacks like kerberoasting are included?
privilege-escalation-methods includes domain-focused escalation techniques such as Kerberoasting to harvest service account credentials, golden ticket creation for persistent access, LLMNR poisoning for credential interception, and Mimikatz DCSync attacks. These methods enable lateral movement and privilege elevation within compromised Active Directory environments.
How does privilege-escalation-methods address post-exploitation access?
privilege-escalation-methods teaches establishing persistent access after initial shell compromise through privilege escalation, credential harvesting for lateral movement, and maintaining elevated access in compromised networks. It integrates escalation techniques with post-exploitation workflows for sustained red team operations.
What misconfigurations can privilege-escalation-methods help exploit?
privilege-escalation-methods identifies exploitable misconfigurations including NFS root squash vulnerabilities, misconfigured sudo rules, overprivileged service accounts, and weak Active Directory delegation settings. It demonstrates how to systematically discover and chain these weaknesses to gain root or administrator access.
SKILL.md
Rendered from the published skill. Quoted content, verbatim.
Privilege Escalation Methods
Purpose
Provide comprehensive techniques for escalating privileges from a low-privileged user to root/administrator access on compromised Linux and Windows systems. Essential for penetration testing post-exploitation phase and red team operations.
Inputs/Prerequisites
- Initial low-privilege shell access on target system
- Kali Linux or penetration testing distribution
- Tools: Mimikatz, PowerView, PowerUpSQL, Responder, Impacket, Rubeus
- Understanding of Windows/Linux privilege models
- For AD attacks: Domain user credentials and network access to DC
Outputs/Deliverables
- Root or Administrator shell access
- Extracted credentials and hashes
- Persistent access mechanisms
- Domain compromise (for AD
(truncated - see the full file via the links below)
File tree — 1 file
skills/privilege-escalation-methods/SKILL.md
Let your AI agent find skills like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 56,283 agent skills by what they can do, searchable in plain language.
wish › “Learn privilege escalation techniques for post-exploitation access”
Give your agent the search over MCP, or paste the wish link into any chat. No install? Search from any chat →
Related skills
This skill covers offensive techniques for compromising Active Directory environments, including reconnaissance with BloodHound, credential extraction via Kerberoasting and AS-REP roasting, ticket forgery, and lateral movement. Learn pass-the-hash, DCSync, NTLM relay, and exploitation of AD Certificate Services vulnerabilities alongside critical CVE tactics.
Orchestrate post-compromise domain exploitation through Kerberos attacks, coercion-relay chains, certificate template abuse, and BloodHound-guided lateral movement. Covers roasting, delegation abuse, NTLM reflection, ADCS ESC variants, ticket forgery, DCSync, and dMSA BadSuccessor attacks with integrated OPSEC and detection guidance.
Master NTLM relay attacks to capture and forward authentication across multiple protocols for privilege escalation. Learn relay targets, signing requirements, Responder poisoning, ntlmrelayx execution, mitm6 DNS takeover, and cross-protocol techniques including WebDAV coercion to bypass defenses.
Network Attack covers layer-2 and layer-3 poisoning (LLMNR, ARP, DHCPv6), NTLM relay with coercion, traffic interception, and network-service exploitation for lateral movement. It includes TUN-based pivoting with tools like Ligolo-ng and Chisel, plus wireless assessment for WPA2/WPA3. Hand off AD-specific relay work and Kerberos attacks to the active-directory-attack skill.
This skill guides you through methodical privilege escalation assessments on Linux systems, covering enumeration of kernel exploits, sudo misconfigurations, SUID binaries, capabilities, cron jobs, PATH hijacking, and NFS weaknesses. It provides workflows for identifying attack vectors and executing exploitation techniques to achieve root-level access from a low-privilege shell.
This skill covers systematic Linux privilege escalation from low-privilege shell access to root. It walks through enumeration, SUID/SGID binary exploitation, capability abuse, cron job manipulation, NFS misconfigurations, writable system files, LD_PRELOAD tricks, Docker group abuse, and library hijacking—with specific commands and exploitation tables for each vector.
More skills Linux Sudo Suid Capabilities (GPL-3.0) · metasploit-framework (MIT)