A furtive web-based privilege escalation framework