whoami priv - show me your privileges and I will lead you to SYSTEM by Andrea Pierini
hackinparis.co...
On Windows systems, users can be given special privileges. Some of these, if appropriately abused can lead to elevation of privileges to become SYSTEM.
In this talk, I will explain what the privileges and tokens are, how to get them, and based on their characteristics, identify some possible paths for Privilege Escalation via "Windows Privilege abusing" & "Token manipulation" .
Particular attention will be devoted to the privileges “SeImpersonate” and “SeAssignPrimary” which, combined with the “Rotten Potato” exploit and our subsequent research, the “Juicy Potato”, have proved to be “Golden Privilege”
Негізгі бет HIP19: whoami priv - show me your privileges and I will lead you to SYSTEM - A. Pierini
Пікірлер: 3