Privilege Escalation
Part of the Cybersecurity Roadmap
In short
Privilege escalation is how a small foothold becomes full control. Knowing the common causes is exactly what lets defenders close them before anyone can climb.
Moving from limited access to higher privileges (user to admin/root) after initial compromise — exploiting misconfigurations, unpatched software, or weak permissions discovered during Phase 3.
Think of it like this
The intern who finds the master key
An intern should only open the supply cupboard, but someone left the master key in an unlocked drawer. Suddenly they can open every room. Privilege escalation is finding that misplaced master key, and defending means locking the drawers.
Watch it happen
Where escalation comes from, and how to block it
1/4An attacker starts with a normal, limited account on a machine.
The big ideas
What you need to know
Least privilege blocks it
If accounts and services have only what they need, a foothold stays small and cannot climb far.
Patch the kernel and apps
Many escalations use known, patched bugs. Timely updates remove the very steps an attacker would use.
No secrets lying around
Passwords in scripts, config files or history are classic escalation fuel. Keep secrets in a vault.
Monitor for the climb
Sudden use of admin commands or new privileged accounts is a strong signal. Alert on it.
Save yourself the pain
Common mistakes
Oops
Giving services and users broad rights for convenience.
Do this instead
Apply least privilege everywhere. The less each account can do, the less a single foothold can become.
Oops
Leaving credentials in scripts and config files.
Do this instead
Store secrets in a vault and keep them out of files and shell history, which are common escalation sources.
Your mission
Harden a lab machine
Quick check
Which defence most directly limits privilege escalation damage?
Go deeper
- 1Practice privilege escalation on a deliberately vulnerable practice VM.
- 2Learn common Linux and Windows privilege escalation vectors (SUID binaries, weak service permissions).
- 3Understand why privilege escalation is often the pivot point in a real attack chain.
More topics at this stop
Penetration Testing Methodology
Reconnaissance & OSINT
Scanning & Enumeration (Nmap)
Exploitation Basics
Metasploit Framework
Burp Suite Fundamentals
Post-Exploitation Basics
Password Attacks & Cracking
Wireless Security Testing (Overview)
Report Writing for Pentests
Stuck on this topic? Ask an Insider
Get 1:1 guidance from people who've walked this exact path — on the InsideEdge app.
