Windows Privilege Escalation

This walks you through the standard playbook for escalating privileges on Windows during pentests. You get methodologies for enumeration, credential harvesting, service exploitation, token impersonation, and hunting for misconfigurations that let you jump from standard user to Administrator or SYSTEM. It assumes you already have initial access (shell or RDP) and covers tools like WinPEAS, PowerUp, and Seatbelt. The approach is systematic rather than a collection of random exploits. One thing to note: this passed Gen Agent Trust Hub and Socket but failed Snyk, so review what you're running before using it in a client environment where compliance matters.

GitHub stars: 30.2K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add davila7/claude-code-templates --skill 'Windows Privilege Escalation' --agent claude-code

Installs into .claude/skills of the current project.

Files

Windows Privilege Escalation

Purpose

Provide systematic methodologies for discovering and exploiting privilege escalation vulnerabilities on Windows systems during penetration testing engagements. This skill covers system enumeration, credential harvesting, service exploitation, token impersonation, kernel exploits, and various misconfigurations that enable escalation from standard user to Administrator or SYSTEM privileges.