domains / families / security / windows-privilege-escalation

windows-privilege-escalation

combined

Provide systematic methodologies for discovering and exploiting privilege escalation vulnerabilities on Windows systems during penetration testing engagements. Windows local privilege escalation playbook. Use when you have low-privilege shell access on Windows and need to escalate via token abuse, Potato exploits, service misconfigurations, DLL hijacking, UAC bypass, or registry autoruns.

When to use

• This skill is applicable to execute the workflow or actions described in the overview.

When not to use

• unauthorized security assessments
• production system disruption
• lateral movement
• AV evasion
• Active Directory Kerberos attacks
• Active Directory ACL abuse

Skill page

Conflict

The two copies overlap on core Windows local privilege escalation techniques (token/Potato abuse, service misconfigurations, unquoted paths, AlwaysInstallElevated, credential harvesting), but each contains material steps the other lacks. The yaklang copy provides a detailed enumeration checklist, a privilege-to-technique mapping table, a Potato variant comparison table with OS/protocol constraints, and a DLL search-order exploitation section. The sickn33 copy adds a mandatory authorization/confirmation gate, operational/detection/legal constraints, and concrete worked examples (AlwaysInstallElevated, JuicyPotato, unquoted path, registry credential harvesting) that the yaklang copy does not include. Crowning one would hide the other's real alternative content, so they should be combined.