Эскалация привилегий в Linux и Windows

★ 6.6 · security

privilege-escalation-methods is a Claude Code skill that provides a comprehensive reference for privilege escalation techniques on compromised Linux and Windows systems, covering both post-exploitation scenarios and Active Directory attacks used in penetration testing and red team engagements. Linux techniques include sudo abuse via GTFOBins, cron job injection, capability exploitation (cap_setuid, cap_dac_read_search), NFS no_root_squash, and MySQL running as root. Windows coverage includes token impersonation with SweetPotato, service abuse via PowerUp, SeBackupPrivilege and SeLoadDriverPrivilege exploitation, and GPO abuse with SharpGPOAbuse. The Active Directory section covers Kerberoasting with Impacket and CrackMapExec, AS-REP Roasting with Rubeus, Golden Ticket creation via Mimikatz DCSync, Pass-the-Ticket, and NTLM Relay with Responder. Designed for offensive security professionals who need ready-to-use commands during the post-exploitation phase of an authorized engagement.