Overview
MITRE ATT&CK: Privilege Escalation (TA0004) — the adversary is trying to gain higher-level permissions.
Note in this category is about how to escalate privilege from low privilege users in a system. Things like exploiting misconfigurations inside a server, exploiting vulnerabilities of a binary that allow actions of higher privilege user.
🧠 Techniques
File Created (incomplete) Living Off The Land May 21, 2026 Active Directory - ACL Abuse (GenericAll & ForceChangePassword) Wednesday, July 22nd 2026, 4:08:44 am Active Directory - BadSuccessor (dMSA Abuse) September 06, 2026 Active Directory - Deleted Object Restoration September 06, 2026 Active Directory - ESC1 (Misconfigured Certificate Template) Abuse July 23, 2026 Active Directory - ESC4 (Vulnerable Certificate Template Access Control) Abuse July 23, 2026 Active Directory - ESC9 (No Security Extension) Abuse July 23, 2026 Active Directory - LAPS Password Retrieval Abuse July 24, 2026 Active Directory - Ownership Abuse (WriteOwner & WriteDacl) July 23, 2026 Active Directory - Pass-the-Cert (LDAP Schannel Authentication) July 23, 2026 Active Directory - Resource-Based Constrained Delegation (RBCD) Attack July 22, 2026 Active Directory - SeBackupPrivilege Abuse Wednesday, July 22nd 2026, 2:51:47 am Active Directory - Server Operators Group Abuse July 21, 2026 Active Directory - Shadow Credentials Attack July 23, 2026 Active Directory - Targeted Kerberoasting July 22, 2026 Cross-site Request Forgery May 21, 2026 Cross-site Scripting May 22, 2026 Docker White-box Challenge Enumeration Thursday, February 26th 2026, 3:38:39 pm JavaScript - Prototype Pollution April 12, 2026 Kubernetes - Malicious Pod Creation (hostPath Escape) July 27, 2026 Node.js Inspector Protocol RCE July 28, 2026 Potato Attack July 20, 2026 PrintNightmare (CVE-2021-1675) July 24, 2026 Python - Class Pollution Wednesday, April 15th 2026, 7:52:25 pm Server-side Request Forgery May 21, 2026 Session Fixation Sunday, April 12th 2026, 4:56:52 pm XSS - DOM Clobbering Wednesday, May 6th 2026, 7:51:54 am
📦 Tech Stack