What tools are mentioned in this skill?

The skill references industry-standard security tools including Mimikatz, Impacket, Rubeus, Responder, and GTFOBins references.

How does this skill help improve organizational security?

By simulating realistic attack vectors, security teams can discover misconfigurations and patch vulnerabilities before an actual breach occurs.

Which operating systems are covered by these techniques?

The skill includes comprehensive techniques for both Linux (Sudo, SUID, Cron, Capabilities) and Windows (Token Impersonation, GPO abuse, Active Directory) systems.

Does it include guidance for Active Directory environments?

Yes, it provides detailed methodologies for common AD attacks such as Kerberoasting, AS-REP Roasting, Pass-the-Ticket, and DCSync.

Is this skill intended for malicious use?

No, this skill is strictly designed for authorized penetration testing, security audits, and educational purposes to help security professionals identify and fix vulnerabilities.

Privilege Escalation Techniques for Security Testing

Name: Privilege Escalation Techniques for Security Testing
Author: zebbern

byzebbern

•

2,883

•

Seguridad y Pruebas

Facilitates the identification and testing of privilege escalation paths on Linux and Windows systems for authorized security audits.

This skill provides a comprehensive library of techniques for escalating privileges during authorized penetration testing and ethical hacking engagements. It covers a wide range of common misconfigurations and vulnerabilities across Linux and Windows environments, including sudo abuse, token impersonation, and Active Directory attack vectors like Kerberoasting. By guiding security professionals through the post-exploitation phase, it helps organizations identify and remediate critical security gaps and configuration weaknesses before they can be exploited by malicious actors.

Características Principales

01Active Directory attack methodologies including Kerberoasting and Golden Tickets

02Comprehensive Linux privilege escalation paths (Sudo, SUID, Cron)

03Credential harvesting and NTLM relaying guidance

042,883 GitHub stars

05Step-by-step command references for security auditing tools

06Advanced Windows escalation techniques (Token Impersonation, Service Abuse)

Casos de Uso

01Conducting authorized internal penetration tests and red team operations

02Training security professionals on post-exploitation methodologies

03Evaluating system hardening and configuration management policies

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add zebbern/claude-code-guide privilege-escalation-methods

For use in Claude.ai and ChatGPT

Download Skill