Add specialized README for Windows Privilege Escalation

README.md

@@ -1,22 +1,98 @@
 ---
-base_model: unsloth/gemma-4-e2b-it-unsloth-bnb-4bit
+base_model: google/gemma-4-e2b-it
 tags:
 - text-generation-inference
 - transformers
-- unsloth
 - gemma4
-- trl
+- peft
+- lora
+- cybersecurity
+- windows
+- privilege-escalation
+- pentesting
+- red-team
+- winpeas
 license: apache-2.0
 language:
 - en
 ---
 
-# Uploaded  model
+# Gemma 4 E2B — Windows Privilege Escalation Expert
 
-- **Developed by:** rezaduty
-- **License:** apache-2.0
-- **Finetuned from model :** unsloth/gemma-4-e2b-it-unsloth-bnb-4bit
+A QLoRA fine-tuned version of [Gemma 4 E2B Instruct](https://huggingface.co/google/gemma-4-e2b-it) specialized in **windows privilege escalation**.
+Specialized in **Windows privilege escalation**: service misconfigurations, token impersonation (Potato family), UAC bypass, registry attacks, scheduled tasks, kernel exploits, and credential hunting.
 
-This gemma4 model was trained 2x faster with [Unsloth](https://github.com/unslothai/unsloth)
+Part of the [rezaduty cybersecurity model family](https://huggingface.co/rezaduty).
 
-[<img src="https://raw.githubusercontent.com/unslothai/unsloth/main/images/unsloth%20made%20with%20love.png" width="200"/>](https://github.com/unslothai/unsloth)
+---
+
+## Expertise
+
+- Methodology: WinPEAS, PowerUp, Seatbelt enumeration
+- Service misconfigurations: unquoted paths, weak ACLs, DLL hijacking
+- Token impersonation: JuicyPotato, PrintSpoofer, RoguePotato (Potato family)
+- UAC bypass techniques: fodhelper, eventvwr, DiskCleanup, ICMLuaUtil
+- Registry privesc: AlwaysInstallElevated, autoruns, winlogon credentials
+- SeBackupPrivilege, SeRestorePrivilege, SeDebugPrivilege abuse
+- Kernel exploits and patch-gap exploitation
+
+---
+
+## Model Details
+
+| Property | Value |
+|---|---|
+| **Base model** | google/gemma-4-e2b-it (2B parameters) |
+| **Fine-tuning method** | QLoRA (rank 16, α 16) |
+| **Domain** | Windows Privilege Escalation |
+| **Dataset** | [rezaduty/cybersecurity-qa-v2](https://huggingface.co/datasets/rezaduty/cybersecurity-qa-v2) |
+| **License** | Apache 2.0 |
+
+---
+
+## Usage
+
+```python
+from transformers import AutoTokenizer, AutoModelForCausalLM
+from peft import PeftModel
+import torch
+
+base_model = "google/gemma-4-e2b-it"
+adapter    = "rezaduty/gemma4-e2b-privesc-windows"
+
+tokenizer = AutoTokenizer.from_pretrained(adapter)
+model = AutoModelForCausalLM.from_pretrained(
+    base_model, torch_dtype=torch.bfloat16, device_map="auto"
+)
+model = PeftModel.from_pretrained(model, adapter)
+
+messages = [
+    {"role": "system", "content": [{"type": "text", "text": "You are an expert in Windows privilege escalation techniques. Provide deep technical answers on Windows privesc methods, detection strategies, and hardening measures with specific commands, tool names, and CVE references where applicable."}]},
+    {"role": "user",   "content": [{"type": "text", "text": "Your question here"}]},
+]
+inputs = tokenizer.apply_chat_template(
+    messages, tokenize=True, add_generation_prompt=True, return_tensors="pt"
+).to(model.device)
+output = model.generate(inputs, max_new_tokens=512, temperature=0.7, top_p=0.9)
+print(tokenizer.decode(output[0][inputs.shape[-1]:], skip_special_tokens=True))
+```
+
+---
+
+## System Prompt
+
+```
+You are an expert in Windows privilege escalation techniques. Provide deep technical answers on Windows privesc methods, detection strategies, and hardening measures with specific commands, tool names, and CVE references where applicable.
+```
+
+---
+
+## See Also
+
+- [General cybersecurity model](https://huggingface.co/rezaduty/gemma4-e2b-cybersecurity-interview)
+- [Docker & Container Security](https://huggingface.co/rezaduty/gemma4-e2b-docker-container-security)
+- [Kubernetes Security](https://huggingface.co/rezaduty/gemma4-e2b-kubernetes-security)
+- [AI & LLM Security](https://huggingface.co/rezaduty/gemma4-e2b-ai-llm-security)
+- [Cloud IAM & Terraform](https://huggingface.co/rezaduty/gemma4-e2b-cloud-iam-terraform)
+- [Active Directory & Red Team](https://huggingface.co/rezaduty/gemma4-e2b-redteam-activedirectory)
+- [All rezaduty models](https://huggingface.co/rezaduty)