Windows Privilege Escalation Cheatsheet

A practical, ordered checklist for Windows local privilege escalation during labs, CTFs, and authorised internal testing.

May 26, 2026 · 12 min

VulnLab: Job

Windows machine starting from a phishing LibreOffice document, abusing IIS web root access, and escalating with SeImpersonatePrivilege via GodPotato and RunasCs.

October 13, 2025 · 6 min

VulnLab: Escape

Windows kiosk-style box breaking out through RDP and Edge file-system browsing, bypassing binary restrictions by renaming executables, recovering a password from Remote Desktop Plus, and elevating UAC through the GUI.

October 12, 2025 · 6 min