PrivKit

A collection of Cobalt Strike Beacon Object Files for local Windows privilege-escalation and credential/configuration checks. The documented checks cover AlwaysInstallElevated, autologon and Credential Manager secrets, writable PATH and autorun targets, service permissions and paths, token privileges, PowerShell history, and UAC state. Findings are review candidates; the checks do not themselves prove that a path is exploitable or perform privilege escalation.