"Universal" Local Privilege Escalation in Windows 11

Описание: Check out ShellcodePack and MacroPack PRO by Balliskit for all your evasion needs! Get 5% off MacroPack PRO and ShellcodePack PRO using the code FLANG24. Visit https://www.balliskit.com/. Demo videos are available at https://vimeo.com/balliskit.

Timestamps:
00:00 Attack Explanation and Overview
04:01 Client Setup
07:51 Attack Setup
18:46 Attack Execution
19:34 Getting a shell
23:40 Outro

Tools Used:
https://github.com/fortra/impacket
https://github.com/p0dalirius/Coercer
https://github.com/dirkjanm/PKINITtools
https://github.com/cube0x0/SharpSyste...
https://gist.github.com/Flangvik/3c02...
https://github.com/its-a-feature/Mythic
https://github.com/MythicAgents/Apollo
https://github.com/cube0x0/LdapSignCheck

Stuff related to WebClient:
https://github.com/outflanknl/C2-Tool...
https://gist.github.com/gladiatx0r/1f...

Stuff related to EFS Service:
https://gist.github.com/dadevel/903d7...
https://x.com/0x64616e/status/1787936...
https://x.com/L3o4j/status/1817189632...

Commands used:
https://gist.githubusercontent.com/Fl...

Information about S4USelf:
https://www.blackhillsinfosec.com/wp-...
https://posts.specterops.io/shadow-cr...
https://learn.microsoft.com/en-us/ope...

Other relay attacks that can be used in the same scenario: https://www.guidepointsecurity.com/bl...

If you are planning on purchasing one of the great courses by Zero Point Security, please consider using my affiliate code 1e3cfb, or use this link
https://training.zeropointsecurity.co...

Join the Flangvik Discord! :)
  / discord  

Follow me on Twitter:
  / flangvik​  

#cybersecurity #hacking #security #programming #informationsecurity #coding #tech #code #pentest