https://solvere.app/tags/privilege-escalation/ Recent content in Privilege-Escalation on Solvere Labs en-us contact@solvere.app (Solvere Labs) contact@solvere.app (Solvere Labs) © 2026 Solvere Labs Tue, 09 Jun 2026 00:00:00 +0000 https://solvere.app/icon-512.png https://solvere.app/tags/privilege-escalation/ https://solvere.app/ctfs/thm/operation-promotion/ Tue, 09 Jun 2026 00:00:00 +0000 naval0505 thmwebcommand-injectionprivilege-escalationrcereverse-shellsqliapacheenum4linux https://solvere.app/ctfs/thm/operation-promotion/ You are up for promotion at Hadron Security. Your senior lead, Mara, has handed you a solo engagement against RecruitCorp, a small recruiting firm with a public-facing portal. https://solvere.app/tutorials/guides/winpeas/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs windowsprivilege-escalationenumerationpost-exploitation https://solvere.app/tutorials/guides/winpeas/ A practical WinPEAS guide: get the Windows privilege-escalation enumerator onto a target, read its color-coded output, focus on the high-signal findings, and avoid drowning in noise. https://solvere.app/tutorials/guides/pspy/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs linuxprivilege-escalationenumerationcronpost-exploitation https://solvere.app/tutorials/guides/pspy/ The pspy quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Transfer the static binary, watch processes and cron fire in real time without root, catch a UID=0 root timer, save and grep the feed for root commands, and turn a writable cron script into a privilege-escalation lead. https://solvere.app/tutorials/guides/powerup/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs windowsprivilege-escalationenumerationpowershellpost-exploitationunquoted-service-path https://solvere.app/tutorials/guides/powerup/ A practical PowerUp guide: run the PowerSploit Windows privesc auditor, read its check output honestly, focus on the high-signal service and path findings, and keep it lab-safe. https://solvere.app/tutorials/guides/linpeas/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs linuxprivilege-escalationenumerationlinpeaspost-exploitationsudosuid https://solvere.app/tutorials/guides/linpeas/ The LinPEAS quick reference: the flags that matter, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Deliver the script to a target, run and save a clean no-color report, tune the depth (stealth, all-checks, extra, regex), scope checks by group or MITRE technique, grep the high-signal findings, and read the color legend honestly. https://solvere.app/tutorials/guides/linenum/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs linuxprivilege-escalationenumerationbashsuidsudo https://solvere.app/tutorials/guides/linenum/ The LinEnum quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Deliver the script to a foothold, run default vs thorough, hunt keywords, export files, write a report, and read the sudo, SUID/SGID, cron, and creds sections that matter. https://solvere.app/ctfs/vulnhub/mr-robot/ Fri, 24 Jan 2025 00:00:00 +0000 neospl0it vulnhubreversingwebbrute-forcecrongtfobinspassword-crackingprivilege-escalationreverse-shell https://solvere.app/ctfs/vulnhub/mr-robot/ The Mr. Robot virtual machine (VM) is an exciting challenge inspired by the hit TV series Mr. Robot. It features three hidden keys, progressively increasing in difficulty. https://solvere.app/ctfs/vulnhub/driftingblues-5/ Thu, 12 Sep 2024 00:00:00 +0000 sagar-sehrawat vulnhubwordpresswpscansshbrute-forcesteganographyhash-crackingcronprivilege-escalation https://solvere.app/ctfs/vulnhub/driftingblues-5/ WordPress user enumeration via wpscan plus SSH brute-force gain a foothold, then a cracked KeePass database yields a filename that triggers a root cron job for root credentials. https://solvere.app/ctfs/vulnhub/driftingblues-4/ Wed, 11 Sep 2024 00:00:00 +0000 sagar-sehrawat vulnhublinuxftpsshbrute-forcesuidpath-hijackingprivilege-escalationlinpeas https://solvere.app/ctfs/vulnhub/driftingblues-4/ Layered web encoding (Base64/Brainfuck/QR) leaks usernames for FTP brute-force, an SSH key upload yields a shell, then a PATH-hijacked SUID binary gives root. https://solvere.app/ctfs/vulnhub/driftingblues-2/ Wed, 11 Sep 2024 00:00:00 +0000 sagar-sehrawat vulnhubwordpresswpscanbrute-forcereverse-shellsshgtfobinsprivilege-escalationlinux https://solvere.app/ctfs/vulnhub/driftingblues-2/ A WordPress login brute-forced with wpscan plants a PHP reverse shell in a theme's 404.php, then passwordless sudo nmap escalates to root.