> For the complete documentation index, see [llms.txt](https://idiotc4t.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://idiotc4t.com/privilege-escalation.md).

# 权限提升

- [基于注册表劫持BypassUAC](https://idiotc4t.com/privilege-escalation/bypassuac-fodhelper.md): bypassuac-Fodhelper
- [基于dll劫持BypassUac](https://idiotc4t.com/privilege-escalation/dll-hijack-bypassuac.md)
- [通过com组件BypassUAC](https://idiotc4t.com/privilege-escalation/com-bypassuac.md)
- [通过复制Token提权到SYSTEM](https://idiotc4t.com/privilege-escalation/token-manipulation.md)
- [通过code\&dll注入提权到SYSTEM](https://idiotc4t.com/privilege-escalation/code-dll-injection-privilege-escalation.md)
- [通过伪装PPID提权到SYSTEM](https://idiotc4t.com/privilege-escalation/privilege-escalation-ppid.md): PPID-Priv
- [通过系统服务提权到SYSTEM](https://idiotc4t.com/privilege-escalation/privilege-escalation-service.md)