Windows Privilege escalation through SeBackup / SeRestore
Abuse SeBackup and SeRestore to dump the SAM and SYSTEM hives and escalate to Administrator.
7 posts tagged “Red Teaming”.
Abuse SeBackup and SeRestore to dump the SAM and SYSTEM hives and escalate to Administrator.
Use msconfig's auto-elevation to get a high-integrity shell without triggering a UAC prompt.
A walkthrough of classic shellcode injection with OpenProcess, VirtualAllocEx, WriteProcessMemory, and CreateRemoteThread.
Create and disguise a malicious Windows service to keep access across reboots.
Hide Windows API calls behind dynamically resolved function pointers to frustrate static analysis.
Local, remote, and dynamic SSH tunnels explained with practical pivoting examples.
Place a shellcode byte array in the .text or .data section of a PE, then load and execute it from a small C++ harness.