skills.rest
ArianHobson333
ArianHobson333COMMUNITY
Explore all skills by this author →
GitHub

privilege-escalation

Automates privilege escalation exploits on Windows and Linux systems.

7|1|Updated Apr 14, 2026
Search Tags:#Linux#Windows#privilege escalation#UAC bypass#service abuse
One-click install
npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill privilege-escalation-arianhobson333
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: privilege-escalation
Source: https://github.com/ArianHobson333/claude-bug-bounty-stack/tree/main/vendor/Decepticon/skills/post-exploit/privilege-escalation
Command: npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill privilege-escalation-arianhobson333

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires GodPotato, PrintSpoofer, winPEAS, linPEAS, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates various privilege escalation techniques on Windows and Linux systems, saving bug bounty hunters significant time in their research and exploitation efforts.

Core Features & Use Cases

  • Windows Token Impersonation: Execute commands with SYSTEM privileges using GodPotato, PrintSpoofer, and SigmaPotato.
  • UAC Bypass: Implement UAC bypass techniques such as fodhelper.exe, eventvwr.exe, and CMSTPLUA COM object.
  • Service Abuse: Exploit unquoted service paths, weak service permissions, and DLL hijacking.
  • Linux Privilege Escalation: Utilize SUID/SGID binaries, sudo misconfigurations, Linux capabilities, and cron job exploitation.
  • Automated Enumeration: Use tools like winPEAS and linPEAS for automated privilege escalation enumeration.
  • Use Case: When conducting penetration testing, quickly escalate privileges on Windows and Linux systems to gain higher-level access for further exploitation.

Quick Start

Run the privilege-escalation skill to automatically enumerate and exploit common privilege escalation vectors on the target system.

Frequently Asked Questions about privilege-escalation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate privilege escalation on Windows and Linux systems?▼

Automate Windows and Linux privilege escalation by running the Skill to execute token impersonation, UAC bypass, and service abuse, while running tools like winPEAS and linPEAS for automated enumeration.

What is the best way to bypass UAC on Windows during penetration testing?▼

Bypass UAC on Windows during penetration testing by exploiting techniques like fodhelper.exe, eventvwr.exe, and CMSTPLUA COM object to execute commands with higher-level access.

How does token impersonation work for gaining SYSTEM privileges?▼

Token impersonation for SYSTEM privileges works by using tools like GodPotato, PrintSpoofer, and SigmaPotato to execute commands with SYSTEM-level access on compromised Windows systems.

Do I need external tools to exploit unquoted service paths and weak permissions?▼

Yes, you need external tools and scripts to exploit unquoted service paths, weak service permissions, and DLL hijacking, as the Skill relies on dependencies like GodPotato and PrintSpoofer to automate service abuse.

Can I use linPEAS and winPEAS for automated privilege escalation enumeration?▼

Yes, you can use linPEAS and winPEAS for automated privilege escalation enumeration, as the Skill utilizes these tools to automatically identify SUID/SGID binaries, sudo misconfigurations, and weak service permissions.

What Linux privilege escalation techniques are available for bug bounty hunting?▼

Available Linux privilege escalation techniques for bug bounty hunting include exploiting SUID/SGID binaries, sudo misconfigurations, Linux capabilities, and cron job exploitation to gain higher-level access.

Related Skills

Explore More Software Engineering Skills→
zebbernzebbern
34

OSCP Penetration Testing Methodology

Provides OSCP-standard penetration methodology across Windows, Linux, and Active Directory environments.

Community
Advanced
utsavthakurutsavthakur

linux-lateral-movement

Perform Linux lateral movement via SSH, credential harvesting, and pivoting.

Community
Advanced
ArianHobson333ArianHobson333
7

reconnaissance

Identify subdomains, ports, endpoints, APIs, and attack surfaces.

Community
Advanced
xijunwwxijunww
1

intranet-pentest

Automate intranet penetration testing from reconnaissance to reporting.

Community
Advanced