Do I need pre-existing access to use these techniques?

Yes, these methods are designed for the post-exploitation phase, meaning you typically need an initial low-privilege shell or user access on the target system first.

Can this skill help identify vulnerabilities in Active Directory?

Absolutely. It includes specific modules for Kerberoasting, AS-REP Roasting, Golden/Silver Tickets, and DCSync attacks to identify and exploit AD misconfigurations.

Which security tools are referenced in this skill?

It provides commands and workflows for industry-standard tools such as Mimikatz, Rubeus, the Impacket suite, Responder, PowerUp, and GTFOBins.

What operating systems does this skill cover?

This skill provides comprehensive coverage for both Linux distributions and Windows environments, including local system exploits and complex Active Directory network attacks.

Is there guidance for Linux-specific privilege escalation?

Yes, it covers a wide range of Linux vectors including sudoers abuse, scheduled tasks (cron), SUID/GUID binaries, and kernel capabilities.

Privilege Escalation Methods

Name: Privilege Escalation Methods
Author: claudiodearaujo

byclaudiodearaujo

0•

安全与测试

Provides comprehensive techniques and commands for escalating user privileges on compromised Linux and Windows systems.

This skill serves as a specialized knowledge base for cybersecurity professionals performing post-exploitation tasks during penetration tests or red team engagements. It offers a structured library of proven techniques for moving from low-privilege access to root or administrator status, covering everything from Linux sudo misconfigurations and cron jobs to advanced Windows Active Directory attacks like Kerberoasting, Token Impersonation, and Golden Ticket creation. By providing ready-to-use commands and tool references for environments like Kali Linux, it streamlines the elevation process while ensuring best practices in security auditing.

主要功能

01Integrated tool guidance for Mimikatz, Rubeus, Impacket, and Responder

02Linux escalation via Sudo, Cron, SUID binaries, and Capabilities

030 GitHub stars

04Credential harvesting techniques using LLMNR poisoning and NTLM relay

05Active Directory attack vectors like Kerberoasting and AS-REP Roasting

06Windows local escalation including Token Impersonation and Service Abuse

使用场景

01Post-exploitation phase of professional penetration tests

02Security auditing and hardening of Linux server configurations

03Red team operations targeting complex Windows Active Directory environments

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/izacenter privilege-escalation-methods

For use in Claude.ai and ChatGPT

Download Skill