Techniques an attacker uses to gain higher-level permissions on a system or network — vertical (root from user) or horizontal (peer account).
On Linux: misconfigured sudoers, world-writable cron entries, capabilities (CAP_SYS_ADMIN), kernel CVEs. On Windows: token impersonation, service permissions, DLL hijacking, UAC bypass. In cloud: IAM PassRole chains, see our AWS IAM escalation post.
See our web application penetration testing, API security testing, network penetration testing, and cloud security audit services for how we test for and defend against this class of issue.
30-minute call with an OSCP-certified engineer. Tailored proposal in 24 hours.