Linux Privilege Escalation

When to Activate

• Gained an initial unprivileged shell on a Linux host and need root or a higher-privileged account
• Post-exploitation lateral/vertical movement on Linux servers, workstations, CI runners, or appliances
• Container / Kubernetes pod foothold that needs to escape to the host node
• Triaging a host for misconfig-based LPE (SUID, sudo, capabilities, writable units/cron) before reaching for kernel 0-day
• CTF / lab challenges requiring privilege escalation with a defensible, detection-aware methodology

Technique Map