Windows Privilege Escalation

Built for authorized pentesting engagements where you've got low-privilege access on a Windows box and need to escalate to Administrator or SYSTEM. Walks through enumeration tactics like checking user privileges and service misconfigurations, credential harvesting from SAM files and unattend.xml, exploiting unquoted service paths and AlwaysInstallElevated registry settings, and token impersonation attacks using tools like JuicyPotato and PrintSpoofer. The methodology is systematic and covers the standard privesc playbook, from basic whoami checks through kernel exploit identification. Strictly for authorized security assessments where you have written permission. If you're doing internal security validation or red team exercises, this gives you a structured checklist to work through.