Privilege Escalation
Here are the articles in this section:
T1134: Primary Access Token Manipulation
Defense Evasion, Privilege Escalation by stealing an re-using security access tokens.
Windows NamedPipes 101 + Privilege Escalation
T1038: DLL Hijacking
DLL Search Order Hijacking for privilege escalation, code execution, etc.
T1108: WebShells
Redundant Access - Webshells for evading defenses and persistence.
T1183: Image File Execution Options Injection
Defense Evasion, Persistence, Privilege Escalation
Unquoted Service Paths
Pass The Hash: Privilege Escalation with Invoke-WMIExec
Environment Variable $Path Interception
Weak Service Permissions