> For the complete documentation index, see [llms.txt](https://pnpt.adot8.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pnpt.adot8.com/windows-privilege-escalation.md).

# Windows Privilege Escalation

- [Initial Enumeration Manual](https://pnpt.adot8.com/windows-privilege-escalation/initial-enumeration-manual.md)
- [System Enumeration](https://pnpt.adot8.com/windows-privilege-escalation/initial-enumeration-manual/system-enumeration.md)
- [User Enumeration](https://pnpt.adot8.com/windows-privilege-escalation/initial-enumeration-manual/user-enumeration.md)
- [Network Enumeration](https://pnpt.adot8.com/windows-privilege-escalation/initial-enumeration-manual/network-enumeration.md)
- [Password Hunting](https://pnpt.adot8.com/windows-privilege-escalation/initial-enumeration-manual/password-hunting.md)
- [AV and Firewall Enumeration](https://pnpt.adot8.com/windows-privilege-escalation/initial-enumeration-manual/av-and-firewall-enumeration.md)
- [Initial Enumeration  Automated](https://pnpt.adot8.com/windows-privilege-escalation/initial-enumeration-automated.md)
- [Methodology > Tools](https://pnpt.adot8.com/windows-privilege-escalation/initial-enumeration-automated/methodology-greater-than-tools.md)
- [Kernel Exploits](https://pnpt.adot8.com/windows-privilege-escalation/kernel-exploits.md)
- [Stored Passwords and Port Forwarding](https://pnpt.adot8.com/windows-privilege-escalation/stored-passwords-and-port-forwarding.md)
- [Windows Subsystem for Linux](https://pnpt.adot8.com/windows-privilege-escalation/windows-subsystem-for-linux.md)
- [Impersonation and Potato Attacks](https://pnpt.adot8.com/windows-privilege-escalation/impersonation-and-potato-attacks.md)
- [RunAs](https://pnpt.adot8.com/windows-privilege-escalation/runas.md)
- [Registy](https://pnpt.adot8.com/windows-privilege-escalation/registy.md)
- [AutoRuns](https://pnpt.adot8.com/windows-privilege-escalation/registy/autoruns.md)
- [AlwaysInstallElevated](https://pnpt.adot8.com/windows-privilege-escalation/registy/alwaysinstallelevated.md)
- [Regsvc ACL](https://pnpt.adot8.com/windows-privilege-escalation/registy/regsvc-acl.md)
- [Executable Files](https://pnpt.adot8.com/windows-privilege-escalation/executable-files.md)
- [Startup Applications](https://pnpt.adot8.com/windows-privilege-escalation/startup-applications.md)
- [DLL Hijacking](https://pnpt.adot8.com/windows-privilege-escalation/dll-hijacking.md)
- [Service Permissions](https://pnpt.adot8.com/windows-privilege-escalation/service-permissions.md)
- [Binary Paths](https://pnpt.adot8.com/windows-privilege-escalation/service-permissions/binary-paths.md)
- [Unquoted Service Paths](https://pnpt.adot8.com/windows-privilege-escalation/service-permissions/unquoted-service-paths.md)
- [getsystem](https://pnpt.adot8.com/windows-privilege-escalation/getsystem.md)
- [CVE-2019-1388](https://pnpt.adot8.com/windows-privilege-escalation/cve-2019-1388.md)