performing-privilege-escalation-on-linux

What problem does it solve? During authorized penetration tests and red team engagements, gaining an initial foothold on a Linux host usually yields only a low-privilege shell. This Skill guides the systematic enumeration and exploitation of privilege escalation vectors so testers can reach root and demonstrate real impact. ## Core Features & Use Cases - Escalation Vector Coverage: Documents SUID/SGID binaries, sudo misconfigurations, kernel exploits (Dirty Cow, Dirty Pipe, PwnKit), cron job abuse, capabilities, and writable systemd service files. - Tooling Guidance: Maps tools like LinPEAS, LinEnum, linux-exploit-suggester, pspy, and GTFOBins to specific enumeration and exploitation tasks. - MITRE ATT&CK Mapping: Aligns each technique with ATT&CK techniques such as T1548.001, T1068, and T1053.003 for structured reporting. - Use Case: After obtaining a low-privilege shell on a lab target, run LinPEAS, review sudo -l output and SUID binaries against GTFOBins, then exploit a misconfigured cron job to gain root and document the evidence. ## Quick Start Ask the agent to enumerate privilege escalation vectors on the compromised Linux host and identify a path to root using LinPEAS and manual checks.