Search

Home

PNPT Studies

PJPT Studies

AD CS / Certificate Attacks (ESC1-15) (1, 8, 11 for now)

Report Writing / Client Presentation

Operationalizing Cybercrime Data (June 2025)

Impersonation Privileges

finding them (after getting a normal/non privileged shell):

whoami /priv

bad ones to have enabled:

SeImpresonatePrivilege (AKA SeAssignPrimaryToken) both are Potato Attacks!
SeChangeNotifyPrivilege

meterpreter:

getprivs

same bad ones

PayloadsAllTheThings/Methodology and Resources/Windows - Privilege Escalation.md at master · swisskyrepo/PayloadsAllTheThings (github.com)

To see the table format:

https://academy.tcm-sec.com/courses/1154361/lectures/24797727

around 2:30