PrivEsc Literacy
Concept: privesc on $LAB VM only — name techniques, no real-workstation recipes.
Visual · msf_privesc_literacy
Privesc = higher privileges on compromised lab box. Original Cyberlium.
Understanding privesc helps defense — not climbing on stranger laptops.
Post modules may attempt local privilege escalation on $LAB victim VM: misconfigurations, weak service perms, kernel issues in intentional vuln images. Learn ATT&CK labels and show options — do not publish step-by-step privesc chains for Windows/macOS daily drivers.
1. Concept on lab VM
Privesc answers: “If I'm user, can I become admin on this $LAB box?”
Only on images designed for it — Metasploitable, custom vuln VM.
Command guide
Try these commands — Concept on lab VM
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
MITRE Privilege Escalation — https://attack.mitre.org/tactics/TA0004/ Post-exploitation — https://docs.rapid7.com/metasploit/working-with-post-modules/
═══ INSTALL ═══
Linux (Debian/Ubuntu): Kali: preinstalled, or: sudo apt install metasploit-framework
macOS: Prefer Kali/Linux VM — brew install metasploit (heavy)
Windows: Use Kali VM or WSL with metasploit-framework — not raw Windows host
═══ LINUX / macOS ═══
Command — copy this
msfconsole -q -x 'search type:post name:enum; search type:post name:escalate; exit' 2>/dev/null || echo 'Privesc literacy on YOUR lab VM'
Primary tools to practice this lesson: msfconsole. Reference sites: MITRE Privilege Escalation (https://attack.mitre.org/tactics/TA0004/); Post-exploitation (https://docs.rapid7.com/metasploit/working-with-post-modules/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Defender controls
Patching, least privilege, EDR, service hardening block privesc.
Log privilege changes and suspicious service starts.
3. Course boundary
No privesc attempts on host OS, school laptops, or cloud tenants.
info post modules — read description, do not run destructive ones outside brief.
4. What you ship: privesc literacy paragraph
Lab-only privesc concept + two defender controls.
5. What you record before the next lesson
Paragraph in notes.
6. Wrong vs right: stranger hosts vs YOUR lab VM
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Privesc post module on roommate's gaming PC.
- Right: Concept + defenses. Next: no real persistence.
Mission: privesc literacy
1) Define privesc on $LAB VM. 2) Name two defender controls. 3) Write NEVER on real workstations.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Privesc vs lateral movement?”
APPLY: Privesc in course means:
APPLY: True or False: Daily-driver privesc is practice.
APPLY: Defenders use:
No Real Persistence
Part of Metasploit Framework — Post Modules Literacy.
Post Lab
Part of Metasploit Framework — Post Modules Literacy.
Quiz — Post Modules Literacy
Part of Metasploit Framework — Post Modules Literacy.