Editing Privilege Escalation (section)

== Horizontal Privilege Escalation ==

Horizontal escalation involves accessing other accounts, sessions, or resources at the same privilege level, typically through impersonation, session hijacking, or misconfigured file access.

=== Common Techniques ===
* Reading other users’ sensitive files due to improper permissions
* Accessing SSH keys, config files, or tokens
* Hijacking user sessions (e.g., TTY snooping or credential reuse)
* Exploiting insecure file-sharing configurations (e.g., SMB shares)
* Abuse of API tokens or database credentials found in cleartext

=== Tools ===
* [[pspy]] (monitors Linux processes to detect privilege-related activity)
* [[ls -la /home/]] (manual check for exposed user data)
* [[ssh-agent hijacking scripts]]
* [[procmon]] (process monitor for live file and registry activity on Windows)
* [[mimikatz]] (extracts passwords, hashes, and tokens from memory)