> For the complete documentation index, see [llms.txt](https://viperone.gitbook.io/pentest-everything/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://viperone.gitbook.io/pentest-everything/everything/everything-active-directory/privilege-escalation.md).

# Privilege Escalation

- [Privilege Escalation Checklist](https://viperone.gitbook.io/pentest-everything/everything/everything-active-directory/privilege-escalation/privilege-escalation-checklist.md)
- [DnsAdmin](https://viperone.gitbook.io/pentest-everything/everything/everything-active-directory/privilege-escalation/dnsadmin.md)
- [Registry](https://viperone.gitbook.io/pentest-everything/everything/everything-active-directory/privilege-escalation/registry.md)
- [Always Install Elevated](https://viperone.gitbook.io/pentest-everything/everything/everything-active-directory/privilege-escalation/registry/registry-alwaysinstallelevated.md)
- [AutoRuns](https://viperone.gitbook.io/pentest-everything/everything/everything-active-directory/privilege-escalation/registry/autoruns.md)
- [Service Exploits](https://viperone.gitbook.io/pentest-everything/everything/everything-active-directory/privilege-escalation/service-exploits.md)
- [Insecure Service Permissions](https://viperone.gitbook.io/pentest-everything/everything/everything-active-directory/privilege-escalation/service-exploits/insecure-service-permissions.md)