linux-privilege-escalation

Featured

This skill should be used when the user asks to "escalate privileges on Linux", "find privesc vectors on Linux systems", "exploit sudo misconfigurations", "abuse SUID binaries", "exploit cron jobs for root access", "enumerate Linux systems for privilege escalation", or "gain root access from low-privilege shell". It provides comprehensive techniques for identifying and exploiting privilege escalation paths on Linux systems.

AI & Automation 4,617 stars 463 forks Updated today MIT

Install

View on GitHub

Quality Score: 96/100

Stars 20%
100
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
50
License 10%
100
Description 5%
100

Skill Content

# Linux Privilege Escalation ## Purpose Execute systematic privilege escalation assessments on Linux systems to identify and exploit misconfigurations, vulnerable services, and security weaknesses that allow elevation from low-privilege user access to root-level control. This skill enables comprehensive enumeration and exploitation of kernel vulnerabilities, sudo misconfigurations, SUID binaries, cron jobs, capabilities, PATH hijacking, and NFS weaknesses. ## Inputs / Prerequisites ### Required Access - Low-privilege shell access to target Linux system - Ability to execute commands (interactive or semi-interactive shell) - Network access for reverse shell connections (if needed) - Attacker machine for payload hosting and receiving shells ### Technical Requirements - Understanding of Linux filesystem permissions and ownership - Familiarity with common Linux utilities and scripting - Knowledge of kernel versions and associated vulnerabilities - Basic understanding of compilation (gcc) for custom exploits ### Recommended Tools - LinPEAS, LinEnum, or Linux Smart Enumeration scripts - Linux Exploit Suggester (LES) - GTFOBins reference for binary exploitation - John the Ripper or Hashcat for password cracking - Netcat or similar for reverse shells ## Outputs / Deliverables ### Primary Outputs - Root shell access on target system - Privilege escalation path documentation - System enumeration findings report - Recommendations for remediation ### Evidence Artifacts - Screensh...

Details

Author
zebbern
Repository
zebbern/claude-code-guide
Created
1 years ago
Last Updated
today
Language
Python
License
MIT

Integrates with

Similar Skills

Semantically similar based on skill content — not just same category

DevOps & Infrastructure Featured

offensive-linux-privesc

Comprehensive Linux privilege escalation methodology for offensive security engagements. Covers the full attack surface from a low-privilege shell to root: SUID/SGID binary abuse via GTFOBins, Linux capabilities exploitation (cap_setuid, cap_dac_override, cap_dac_read_search), sudo misconfigurations including NOPASSWD rules and Baron Samedit (CVE-2021-3156), cron job abuse through writable scripts, PATH hijacking, and wildcard injection with tar/rsync/chown. Includes writable /etc/passwd attacks, NFS no_root_squash exploitation, kernel exploits (DirtyPipe CVE-2022-0847, DirtyCow CVE-2016-5195, PwnKit CVE-2021-4034), Docker group container escapes, LD_PRELOAD and LD_LIBRARY_PATH hijacking for shared library injection, systemd service misconfigurations, and sensitive file enumeration for credential harvesting. Integrates automated enumeration with LinPEAS, linux-exploit-suggester, pspy for process monitoring, and GTFOBins for binary exploitation. Each technique includes detection signatures and defender-side vi

3,234 Updated 1 weeks ago
SnailSploit
Web & Frontend Listed

linux-privilege-escalation

Linux privilege escalation playbook. Use when you have low-privilege shell access and need to escalate to root via SUID/SGID binaries, capabilities, cron abuse, kernel exploits, misconfigurations, or credential harvesting on Linux systems.

1 Updated 1 months ago
snowflakeovo
AI & Automation Featured

privilege-escalation-methods

This skill should be used when the user asks to "escalate privileges", "get root access", "become administrator", "privesc techniques", "abuse sudo", "exploit SUID binaries", "Kerberoasting", "pass-the-ticket", "token impersonation", or needs guidance on post-exploitation privilege escalation for Linux or Windows systems.

4,617 Updated today
zebbern