domains / families / security / performing-privilege-escalation-assessment

performing-privilege-escalation-assessment

separate

'Performs privilege escalation assessments on compromised Linux and Windows

When to use

• After gaining initial low-privilege access during a penetration test to demonstrate full system compromise
• Assessing the security hardening of Linux and Windows servers against local privilege escalation attacks
• Evaluating whether endpoint detection and response (EDR) tools detect common privilege escalation techniques
• Testing the effectiveness of least-privilege policies and application whitelisting on endpoints
• Validating that container breakout and VM escape controls are properly configured

When not to use

• use without written authorization
• use against production systems where exploitation could cause downtime
• deploying kernel exploits on systems without prior approval and rollback capability

Skill page

Source