privilege-escalation-methods
This skill covers systematic approaches to elevate from low-privilege shells to root or administrator access on compromised systems. It addresses both local escalation paths—such as exploiting misconfigured sudo, capabilities, and scheduled tasks on Linux—and Windows-specific vectors including token impersonation and service abuse. For domain environments, it includes Active Directory attacks like Kerberoasting, golden tickets, and credential harvesting via LLMNR poisoning.
Privilege Escalation Methods teaches techniques for gaining root or administrator access on Linux and Windows systems during post-exploitation.
AI-generated summary based on this skill's SKILL.md
Install
zebbern/claude-code-guide/privilege-escalation-methods · repository language: Python
git clone https://github.com/zebbern/claude-code-guide
cp -r claude-code-guide/skills/privilege-escalation-methods ~/.claude/skills/privilege-escalation-methodsnpx skillfed install zebbern/claude-code-guide/privilege-escalation-methodsFrequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How to escalate privileges on Linux systems?
privilege-escalation-methods covers systematic local escalation paths on Linux, including exploiting misconfigured sudo binaries, abusing SUID setuid binaries, leveraging cron job misconfigurations, and manipulating capabilities. The skill examines how to identify and chain these vectors from a low-privilege shell to achieve root access on compromised systems.
What Windows privilege escalation techniques does this skill teach?
privilege-escalation-methods addresses Windows-specific escalation vectors including token impersonation exploits, service abuse, and SeBackupPrivilege misuse. It covers post-exploitation methods to transition from initial shell access to administrator or SYSTEM-level privileges on compromised Windows hosts.
What Active Directory attacks like kerberoasting are included?
privilege-escalation-methods includes domain-focused escalation techniques such as Kerberoasting to harvest service account credentials, golden ticket creation for persistent access, LLMNR poisoning for credential interception, and Mimikatz DCSync attacks. These methods enable lateral movement and privilege elevation within compromised Active Directory environments.
How does privilege-escalation-methods address post-exploitation access?
privilege-escalation-methods teaches establishing persistent access after initial shell compromise through privilege escalation, credential harvesting for lateral movement, and maintaining elevated access in compromised networks. It integrates escalation techniques with post-exploitation workflows for sustained red team operations.
What misconfigurations can privilege-escalation-methods help exploit?
privilege-escalation-methods identifies exploitable misconfigurations including NFS root squash vulnerabilities, misconfigured sudo rules, overprivileged service accounts, and weak Active Directory delegation settings. It demonstrates how to systematically discover and chain these weaknesses to gain root or administrator access.
SKILL.md
rendered from the published skill — quoted content, verbatim
Privilege Escalation Methods
Purpose
Provide comprehensive techniques for escalating privileges from a low-privileged user to root/administrator access on compromised Linux and Windows systems. Essential for penetration testing post-exploitation phase and red team operations.
Inputs/Prerequisites
- Initial low-privilege shell access on target system
- Kali Linux or penetration testing distribution
- Tools: Mimikatz, PowerView, PowerUpSQL, Responder, Impacket, Rubeus
- Understanding of Windows/Linux privilege models
- For AD attacks: Domain user credentials and network access to DC
Outputs/Deliverables
- Root or Administrator shell access
- Extracted credentials and hashes
- Persistent access mechanisms
- Domain compromise (for AD
(truncated - see the full file via the links below)
Read as markdown · JSON record · Browse the source repository
File tree — 1 file
skills/privilege-escalation-methods/SKILL.md