CdpSvcLPE

CdpSvcLPE Escalada local de privilegios en Windows mediante el servicio CdpSvc Dll Hijacking en ruta de SYSTEM escribible Descripción breve: El Servicio de plataforma de dispositivos conectados o CDPSvc es un servicio que se ejecuta como NT AUTHORITY\LOCAL SERVICE e intenta cargar la DLL...

PrintSpoofer

PrintSpoofer De LOCAL/NETWORK SERVICE a SYSTEM abusando del SeImpersonatePrivilege en Windows 10 y Server 2016/2019. Para más información: https://itm4n.github.io/printspoofer-abusing-impersonate-privileges/. Uso Puedes consultar el mensaje de ayuda usando la opción -h. root@kitploit:...

PrintSpoofer

PrintSpoofer Exploit PrintSpoofer que se puede utilizar para escalar los permisos de usuario de servicio en Windows Server 2016, Server 2019 y Windows 10. Para escalar privilegios, la cuenta de servicio debe tener privilegios SeImpersonate. Para ejecutar: PrintSpoofer.exe -i -c cmd Con los...

THM-Tempest

TryHackMe — Tempest SOC Level 1 Pathway | Incident Response Investigation Overview Full incident response investigation of a compromised Windows machine. The attacker gained initial access via a malicious Word document exploiting CVE-2022-30190 Follina, established persistence, tunneled through t...

Post_Exploitation_Privilege_Escalation

⬆️ Week 05 — Post-Exploitation & Privilege Escalation Inter...

Post_Exploitation_Privilege_Escalation

⬆️ Week 05 — Post-Exploitation & Privilege Escalation Inter...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

PrintSpoofer Details !Licensehttps://img.shields.io/badge...

New CherryLoader Malware Mimics CherryTree to Deploy PrivEsc Exploits

A new Go-based malware loader called CherryLoader has been discovered by threat hunters in the wild to deliver additional payloads onto compromised hosts for follow-on exploitation. Arctic Wolf Labs, which discovered the new attack tool in two recent intrusions, said the loader's icon and name...

Metasploit Weekly Wrap-Up

I'm sure you know what's coming, more Log4Shell For those wondering when the Log4Shell remediation nightmare will end, I'm afraid I can't give you that. What I can give you, though, is a new Log4Shell module! With the new module from zeroSteiner you can expect to get unauthenticated RCE on the...