README.md
July 21, 2026 · View on GitHub
🪟 Windows Privilege Escalation
A practical Windows Privilege Escalation cheat sheet and reference guide designed for penetration testers, red teamers, and cybersecurity learners to understand how attackers escalate privileges on Windows systems during post-exploitation.
🌐 Connect With Us
🔵 Telegram – Join Channel
⚫ Twitter/X – Follow Us
🟣 Discord – Join Server
💼 LinkedIn – Follow HackingArticles
🎓 Training Program
🚀 Join Our Cybersecurity Training Program
Hands-on training in Penetration Testing, Red Teaming, and Cybersecurity.
🪟 Windows Privilege Escalation Techniques
| # | Topic | Article |
|---|---|---|
| 1 | 💾 SeBackupPrivilege | Read Article |
| 2 | 🎭 SeImpersonatePrivilege | Read Article |
| 3 | 🐞 SeDebugPrivilege | Read Article |
| 4 | ♻️ SeRestorePrivilege | Read Article |
| 5 | 👑 SeTakeOwnershipPrivilege | Read Article |
| 6 | 🔐 SeTcbPrivilege | Read Article |
| 7 | ⚙️ AlwaysInstallElevated | Read Article |
| 8 | 🌐 DnsAdmins to DomainAdmin | Read Article |
| 9 | 🧨 HiveNightmare | Read Article |
| 10 | 🔑 Registry Run Keys | Read Article |
| 11 | 🚀 Startup Folder | Read Article |
| 12 | 🔓 Stored Credentials (Runas) | Read Article |
| 13 | 🗂️ Weak Registry Permissions | Read Article |
| 14 | 🛠️ Unquoted Service Path | Read Article |
| 15 | 🖥️ Insecure GUI Application | Read Article |
| 16 | 🔧 Weak Service Permissions | Read Article |
| 17 | ⏰ Scheduled Task / Job | Read Article |
| 18 | 🧬 Kernel Exploit | Read Article |
| 19 | 🧾 SamAccountSpoofing (CVE-2021-42278) | Read Article |
| 20 | 🖨️ SpoolFool | Read Article |
| 21 | 🖨️ PrintNightmare | Read Article |
| 22 | 🧑💻 Server Operator Group | Read Article |