> For the complete documentation index, see [llms.txt](https://wiki.zacheller.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wiki.zacheller.dev/pentest/privilege-escalation/windows-privilege-escalation.md).

# Windows Privilege Escalation

{% embed url="<https://www.fuzzysecurity.com/tutorials/16.html>" %}
Non-Active Directory Escalations
{% endembed %}

{% embed url="<https://book.hacktricks.xyz/windows/checklist-windows-privilege-escalation>" %}

{% embed url="<https://blog.stealthbits.com/extracting-user-password-data-with-mimikatz-dcsync/>" %}
