Does this skill include Active Directory attacks?

Yes, it covers Kerberoasting, AS-REP Roasting, Golden/Silver Tickets, and Pass-the-Ticket techniques using tools like Rubeus and Mimikatz.

Does it provide mitigation or remediation advice?

The skill primarily focuses on exploitation techniques, but identifying these paths is the first step in auditing and securing systems against unauthorized access.

Which tools are referenced in the commands?

It provides syntax for industry-standard tools including Impacket, Mimikatz, Rubeus, Responder, PowerUp, and GTFOBins references.

What operating systems are covered by this skill?

The skill provides detailed escalation paths for both Linux distributions and Windows environments, including specific Active Directory attack vectors.

Can this be used for automated security auditing?

While it provides the commands, it is designed to assist a human operator in selecting and executing the right technique based on environmental enumeration.

Privilege Escalation Methods

Name: Privilege Escalation Methods
Author: claudiodearaujo

byclaudiodearaujo

0•

Security & Testing

Provides actionable techniques and command-line references for escalating user privileges on Linux and Windows systems.

This skill acts as a comprehensive reference for security professionals and penetration testers during the post-exploitation phase of an engagement. It covers a wide array of methods to move from low-privileged shell access to root or administrator status, including Linux-specific tactics like sudo binary abuse and cron job exploitation, as well as Windows-centric attacks like token impersonation and service abuse. Additionally, it provides specialized guidance for Active Directory environments, covering advanced techniques such as Kerberoasting, Golden Ticket creation, and DCSync attacks.

Key Features

010 GitHub stars

02Linux-specific exploitation for Sudo, SUID, and Cron tasks

03Troubleshooting guide for common exploitation failures

04Windows service abuse and token impersonation techniques

05Comprehensive Active Directory attack vectors including Kerberoasting

06Credential harvesting and NTLM relaying commands

Use Cases

01Practicing privilege escalation techniques in CTF or lab environments

02Conducting post-exploitation phases in authorized penetration tests

03Auditing system configurations to identify and remediate security weaknesses

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/izacenter privilege-escalation-methods

For use in Claude.ai and ChatGPT

Download Skill