Every major Windows privesc technique — the exact condition that makes it exploitable, operator commands to exploit it, defender detection logic, and remediation. Click any card to expand.
28
Techniques
7
Categories
100%
Client-Side
// Engagement Workflow
PrivEsc Checklist
Systematic checklist for a low-priv Windows shell. Work through each section in order. Check items off as you go — progress saves in your browser.
// Automated & Manual Enumeration
Enum Command Reference
WinPEAS, PowerUp, manual one-liners, and tool transfer methods — every command you need from initial shell to full enumeration coverage.
