# Linux Privilege Escalation

> This skill should be used when the user asks to "escalate privileges on Linux", "find privesc vectors on Linux systems", "exploit sudo misconfigurations", "abuse SUID binaries", "exploit cron jobs for root access", "enumerate Linux systems for privilege escalation", or "gain root access from low-privilege shell". It provides comprehensive techniques for identifying and exploiting privilege escalation paths on Linux systems.

- Skill: `dokhacgiakhoa/linux-privilege-escalation` (Agent Skill, multi-file: 23 files)
- Install (CLI): `npx skillmds@latest add dokhacgiakhoa/linux-privilege-escalation`
- Raw SKILL.md: https://api.skillmd.com/api/skills/dokhacgiakhoa/linux-privilege-escalation/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: Dokhacgiakhoa (https://skillmd.com/u/dokhacgiakhoa)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/dokhacgiakhoa/linux-privilege-escalation

---


# Linux Privilege Escalation

## Purpose

Execute systematic privilege escalation assessments on Linux systems to identify and exploit misconfigurations, vulnerable services, and security weaknesses that allow elevation from low-privilege user access to root-level control. This skill enables comprehensive enumeration and exploitation of kernel vulnerabilities, sudo misconfigurations, SUID binaries, cron jobs, capabilities, PATH hijacking, and NFS weaknesses.

## Inputs / Prerequisites

## 🧠 Knowledge Modules (Fractal Skills)

### 1. [Required Access](./sub-skills/required-access.md)
### 2. [Technical Requirements](./sub-skills/technical-requirements.md)
### 3. [Recommended Tools](./sub-skills/recommended-tools.md)
### 4. [Primary Outputs](./sub-skills/primary-outputs.md)
### 5. [Evidence Artifacts](./sub-skills/evidence-artifacts.md)
### 6. [Phase 1: System Enumeration](./sub-skills/phase-1-system-enumeration.md)
### 7. [Phase 2: Automated Enumeration](./sub-skills/phase-2-automated-enumeration.md)
### 8. [Phase 3: Kernel Exploits](./sub-skills/phase-3-kernel-exploits.md)
### 9. [Phase 4: Sudo Exploitation](./sub-skills/phase-4-sudo-exploitation.md)
### 10. [Phase 5: SUID Binary Exploitation](./sub-skills/phase-5-suid-binary-exploitation.md)
### 11. [Phase 6: Capabilities Exploitation](./sub-skills/phase-6-capabilities-exploitation.md)
### 12. [Phase 7: Cron Job Exploitation](./sub-skills/phase-7-cron-job-exploitation.md)
### 13. [Phase 8: PATH Hijacking](./sub-skills/phase-8-path-hijacking.md)
### 14. [Phase 9: NFS Exploitation](./sub-skills/phase-9-nfs-exploitation.md)
### 15. [Enumeration Commands Summary](./sub-skills/enumeration-commands-summary.md)
### 16. [Reverse Shell One-Liners](./sub-skills/reverse-shell-one-liners.md)
### 17. [Key Resources](./sub-skills/key-resources.md)
### 18. [Operational Boundaries](./sub-skills/operational-boundaries.md)
### 19. [Technical Limitations](./sub-skills/technical-limitations.md)
### 20. [Legal and Ethical Requirements](./sub-skills/legal-and-ethical-requirements.md)
### 21. [Example 1: Sudo to Root via find](./sub-skills/example-1-sudo-to-root-via-find.md)
### 22. [Example 2: SUID base64 for Shadow Access](./sub-skills/example-2-suid-base64-for-shadow-access.md)
### 23. [Example 3: Cron Job Script Hijacking](./sub-skills/example-3-cron-job-script-hijacking.md)