# Windows Privilege Escalation

> Master Windows privilege escalation techniques including WinPEAS enumeration, token impersonation, unquoted service paths, and service misconfigurations to achieve SYSTEM.

Canonical: https://codelivly.com/rooms/windows-privilege-escalation
Last updated: 2026-07-26

| | |
|---|---|
| Level | Advanced |
| Category | Cybersecurity |
| Lessons | 5 |
| Estimated time | 1 h 30 min |
| XP | 150 |

A comprehensive, hands-on module covering Windows privilege escalation from a low-privileged shell to NT AUTHORITY\SYSTEM. Learn how to perform automated and manual enumeration using WinPEAS and PowerUp, exploit unquoted service paths, abuse weak service permissions, and leverage token impersonation vulnerabilities (like PrintSpoofer/JuicyPotato). Includes guided, interactive labs to solidify your post-exploitation skills on Windows targets.

## Lessons

1. What is Windows PrivEsc Methodology (30 min)
2. WinPEAS — Automated Enumeration Walkthrough (30 min)
3. Token Impersonation Attacks (30 min)
4. Service Misconfiguration & Unquoted Path Exploitation (30 min)
5. Guided Lab: Full SYSTEM Walkthrough (30 min)

## Related

- [Learning path: Privilege Escalation](https://codelivly.com/learning-paths/privilege-escalation)
- [All rooms](https://codelivly.com/rooms)