Windows Manual Local Privilege Escalation

Escalate on a real Windows Server VM by hand — no PowerSploit, no shortcuts.

You start as a low-privilege local user on a disposable Windows VM with no privesc tooling installed. Each rep seeds one technique (credentials in files, weak service configs, DLL hijack opportunities) and challenges you to find and exploit it by manual enumeration.

The flag is protected until you escalate; each rep exercises a different technique axis so you build the enumeration habit, not just memorise one payload.

What you'll practice