Guides manual enumeration and automated tooling to escalate from a low-privilege Linux user to root by exploiting misconfigurations, vulnerable services, kernel exploits, and weak permissions, mapped to MITRE ATT&CK. Use during authorized red team engagements or penetration tests once initial low-privilege access on a Linux host is obtained and root-level access is needed.
Start a fresh conversation. Replace the highlighted placeholders.
Use performing-privilege-escalation-on-linux to enumerate SUID/SGID binaries on [authorized Linux lab target] within [written test scope], then deliver a findings-and-remediation report without exploiting anything or seeking root access.
Required inputs
[authorized Linux lab target]
[written test scope]
User-approved starter prompt based on a pinned source version; check current skill requirements before running. Task evidence ↗
SKILL.md
name: performing-privilege-escalation-on-linuxdescription: Guides manual enumeration and automated tooling to escalate from a low-privilege Linux user to root by exploiting misconfigurations, vulnerable services, kernel exploits, and weak permissions, mapped to MITRE ATT&CK. Use during authorized red team engagements or penetration tests once initial low-privilege access on a Linux host is obtained and root-level access is needed.domain: cybersecuritysubdomain: red-teamingtags: - red-team- adversary-simulation- mitre-attack- exploitation- post-exploitation- privilege-escalation- linuxversion: '1.0'author: mahipallicense: Apache-2.0d3fend_techniques: - Restore Object- Network Traffic Policy Mapping- Restore Configuration- Access Modeling- Operational Activity Mappingnist_csf: - ID.RA-01- GV.OV-02- DE.AE-07mitre_attack: - T1595- T1190- T1059- T1078- T1068
Performing Privilege Escalation on Linux
Legal Notice: This skill is for authorized security testing and educational purposes only. Unauthorized use against systems you do not own or have written permission to test is illegal and may violate computer fraud laws.
Overview
Linux privilege escalation involves elevating from a low-privilege user account to root access on a compromised system. Red teams exploit misconfigurations, vulnerable services, kernel exploits, and weak permissions to achieve root. This skill covers both manual enumeration techniques and automated tools for identifying and exploiting privilege escalation vectors.
When to Use
When conducting security assessments that involve performing privilege escalation on linux
When following incident response procedures for related security events
When performing scheduled security testing or auditing activities
When validating security controls through hands-on testing
Prerequisites
Familiarity with red teaming concepts and tools
Access to a test or lab environment for safe execution
Python 3.8+ with required dependencies installed
Appropriate authorization for any testing activities
MITRE ATT&CK Mapping
T1548.001 - Abuse Elevation Control Mechanism: Setuid and Setgid
T1548.003 - Abuse Elevation Control Mechanism: Sudo and Sudo Caching