Skill UI

A comprehensive guide for authorized security assessments, detailing systematic methods to escalate user privileges from low-level access to root control on Linux systems. Techniques covered include comprehensive system enumeration, exploiting kernel vulnerabilities (e.g., dirty pipe), abusing misconfigured sudo permissions (using gtfobins), and exploiting vulnerable SUID binaries.

Provides a catalog of Linux and Windows post-exploitation privilege escalation techniques, covering sudo/capability abuse, scheduled tasks, token impersonation, AD kerberoasting, credential harvesting, and tool recommendations for red teamers.

Detect privilege escalation attempts across Windows and Linux by hunting for token manipulation, UAC bypass, unquoted service paths, kernel exploits, and sudo/doas abuse using EDR/SIEM telemetry and intelligence-driven workflows.

Surfaces abuse of elevation control mechanisms by correlating registry edits, auto-elevating binaries, integrity changes, and Linux sudo/setuid anomalies to hunt for privilege escalation across Windows and Linux environments.

This skill provides a comprehensive methodology for simulating privilege escalation attacks on compromised Linux and Windows environments. It guides the user through identifying vectors—including SUID abuse, misconfigured services, kernel vulnerabilities, cron job exploitation, and credential harvesting—to elevate initial low-privilege access to root or SYSTEM control. It is crucial for deep-dive penetration testing and assessing system security hardening.

This guide details advanced techniques used in red teaming and penetration testing to elevate user privileges from a low-level account to root access on a compromised Linux system. It covers exploiting misconfigurations, vulnerable services (like SUID/SGID binaries), improper sudo rules, kernel vulnerabilities (e.g., Dirty Pipe), and abuse of system services like Cron jobs and Systemd. Essential for authorized security assessments.

Walks through systematic Linux privilege escalation, covering enumeration, automation with linpeas/linenum, kernel exploit hunting, sudo/SUID abuse, and exploitation of cron, LD_PRELOAD, and GTFOBins for gaining root access.

This skill helps plan engaging, structured puzzle-based activities for various settings like classrooms, parties, and corporate team-building events. Users provide the event description, target audience, and overall goal, and the planner generates a comprehensive activity schedule. It includes a minute-by-minute timeline, necessary materials checklist, and generates pre-configured generator links for diverse puzzles (Word Search, Crossword, Sudoku, etc.), ensuring content is theme-appropriate and ready for one-click use.