Skill UI

Systematic Windows privilege escalation guide covering enumeration, credential harvesting, service abuse, token impersonation, kernel exploits and configuration flaws to elevate from standard user to Administrator/SYSTEM during pentests.

Workflow for hunting privilege escalation attempts across Windows and Linux, leveraging EDR/SIEM telemetry to identify token manipulation, UAC bypasses, unquoted service paths, kernel exploits, and sudo/doas abuse.

Performs privilege escalation assessments on compromised Linux and Windows hosts to trace paths from low-privilege shells to root/SYSTEM control. Enumerates misconfigurations, SUID binaries, kernel exploits, and credential stores so testers can demonstrate escalation impact and validate controls like least-privilege policies and EDR detections.

Guides red teams through Linux privilege escalation, combining manual enumeration and automated tooling to spot SUID binaries, sudo flaws, kernel exploits, cron abuse, capabilities, and writable services during authorized assessments.