> For the complete documentation index, see [llms.txt](https://cajac.gitbook.io/ctf-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cajac.gitbook.io/ctf-notes/priv-esc/privilege-escalation-introduction.md).

# Privilege Escalation - Introduction

The adversary is trying to gain higher-level permissions.

{% hint style="info" %}
Please note that this site is a continuous **work-in-progress!**
{% endhint %}

**Privilege Escalation** consists of techniques that adversaries use to gain higher-level permissions on a system or network. Adversaries can often enter and explore a network with unprivileged access but require elevated permissions to follow through on their objectives. Common approaches are to take advantage of system weaknesses, misconfigurations, and vulnerabilities. Examples of elevated access include:

* SYSTEM/root level
* local administrator
* user account with admin-like access
* user accounts with access to specific system or perform specific function

These techniques often overlap with Persistence techniques, as OS features that let an adversary persist can execute in an elevated context.

## Mind maps

### General

From [sagishahar](https://github.com/sagishahar) and his [Windows / Linux Local Privilege Escalation Workshop](https://github.com/sagishahar/lpeworkshop)

<figure><img src="https://2243491301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIUFlVUVxz3SyCymZCy6O%2Fuploads%2FEny0CV3YJE2MOWmPjCaz%2FLocal_Privilege_Escalation.jpg?alt=media&amp;token=f92b6c57-f869-44bf-b119-fa602902e92a" alt=""><figcaption></figcaption></figure>

### Linux

From [C0nd4](https://github.com/C0nd4) and his [OSCP Privilege Escalation](https://github.com/C0nd4/OSCP-Priv-Esc) repository

<figure><img src="https://2243491301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIUFlVUVxz3SyCymZCy6O%2Fuploads%2Ff6K6fkUhmuX2U219X568%2FLinux_Privilege_Escalation.png?alt=media&amp;token=2647b328-cd9d-41cb-a5f3-ff6916aee20b" alt=""><figcaption></figcaption></figure>

### Windows

From [C0nd4](https://github.com/C0nd4) and his [OSCP Privilege Escalation](https://github.com/C0nd4/OSCP-Priv-Esc) repository

<figure><img src="https://2243491301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIUFlVUVxz3SyCymZCy6O%2Fuploads%2F0mySc3LzusGQfUqueaoB%2FWindows_Privilege_Escalation.png?alt=media&amp;token=076dfc66-bbce-41fc-b31c-0c7521f0e0d4" alt=""><figcaption></figcaption></figure>

## Resources

Privilege escalation - Wikipedia: <https://en.wikipedia.org/wiki/Privilege_escalation>

Privilege Escalation (TA0004) - Mitre ATT\&CK: <https://attack.mitre.org/tactics/TA0004/>
