Local Privilege Escalation
High · Access Control · CWE-269
Description
Low-privilege user gains admin/root/SYSTEM.
Root cause
Weak perms, misconfigured services, kernel bugs, token abuse.
Impact
Full host compromise.
Detection
EDR process trees, unusual service installs, SUID/ACL audits.
Mitigation
Hardening, patching, least privilege, remove dangerous SUID.
Secure coding
CIS baselines + continuous config audit.
Safe lab example
Linux/Windows privesc labs (own VMs)
Practise related skills in Labs or deepen on Academy library.