26.1 What Privilege Escalation Is
Privilege escalation means gaining more rights than you were given.
| Type | Meaning | Example |
|---|---|---|
| Vertical | A low user becomes a higher one | A normal user becomes root/admin |
| Horizontal | Same level, but another user's access | One customer reads another customer's data |
An attacker's usual flow: get in as a limited user (a web shell, a cracked SSH login), then escalate to root, because root can read every file, install anything, and cover tracks. Defensively, if you enforce least privilege, even a foothold stays limited.
Ravindra Bagale's Tip
Students samajtat "aat gelo mhanje kaam zale". Nahi! Bahutek veles pahila shell limited user cha asto. Khara dhoka tevha yeto jevha to root banto. Mhanunach least privilege (pratyek user/service la fakt garjepurte adhikar) ha itka mahatvacha defence aahe.
Practice task
In your notes, write the difference between vertical and horizontal escalation with one real-world example of each (one from a Linux server, one from a web app like your reels app).