> For the complete documentation index, see [llms.txt](https://docs.rtlcopymemory.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.rtlcopymemory.com/privilege-escalation.md).

# Privilege Escalation

A good resource: [Linux](https://book.hacktricks.xyz/linux-hardening/privilege-escalation), [Windows](https://book.hacktricks.xyz/windows-hardening/windows-local-privilege-escalation)

## Linux

* <https://gtfobins.github.io/>
* [linPeas](https://github.com/peass-ng/PEASS-ng/tree/master)
* [linEnum](https://raw.githubusercontent.com/rebootuser/LinEnum/master/LinEnum.sh)

A ongoing growing checklist of privesc manual checks (That Linpeas or similar probably does for you and better):

* `sudo -l`
* `cat /etc/crontab`

## Windows

* [Windows Exploit Suggester](https://github.com/bitsadmin/wesng)
* [WinPeas](https://github.com/peass-ng/PEASS-ng/tree/master)
* <https://github.com/411Hall/JAWS>
* <https://lolbas-project.github.io/#>