> For the complete documentation index, see [llms.txt](https://calvin-lai.gitbook.io/calvin-lai-security/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://calvin-lai.gitbook.io/calvin-lai-security/oscp-lab-and-exam/tools-for-an-offensive-certification/strategy-for-an-offensive-exam-certification/privilege-escalation.md).

# Privilege Escalation

## Automatic PE enumeration Tools

### Windows

{% embed url="<https://github.com/carlospolop/PEASS-ng/tree/master/winPEAS>" %}

{% embed url="<https://github.com/PowerShellMafia/PowerSploit/tree/master/Privesc>" %}
PowerSploit: Powerup.ps
{% endembed %}

{% embed url="<https://github.com/GhostPack/SharpUp>" %}

### Linux

{% embed url="<https://github.com/rebootuser/LinEnum>" %}

{% embed url="<https://github.com/carlospolop/PEASS-ng/tree/master/linPEAS>" %}

{% embed url="<https://github.com/Tib3rius/AutoRecon>" %}

## Manual PE Trips

{% embed url="<https://book.hacktricks.xyz/windows-hardening/windows-local-privilege-escalation>" %}

{% embed url="<https://sirensecurity.io/blog/windows-privilege-escalation-resources/>" %}

{% embed url="<https://sirensecurity.io/blog/linux-privilege-escalation-resources/>" %}