Scheduled Tasks

Notes from oscp.adot8.com — windows privilege escalation.

#windows privilege escalation#adot8

Scheduled tasks

code

01schtasks /query /fo LIST /v

Check permissions on binary

code

01icacls C:\Users\john\Documents\Cleanup.exe

If permissions are sufficient (I F) replace with malicious binary