Windows Privilege Escalation Archives • Cybersecurity News

Windows Privilege Escalation Vulnerabilities

November 18, 2024

From CVE to PoC: A Collection Maps Windows Privilege Escalation Landscape

Security researcher Michael Zhmaylo has assembled a comprehensive collection of publicly disclosed exploits for Local Privilege Escalation (LPE) vulnerabilities affecting Microsoft Windows operating systems. This repository, hosted on Github, serves...

Post Exploitation

May 2, 2023

GodPotato: Windows privilege escalation tool

GodPotato Based on the history of Potato privilege escalation for 6 years, from the beginning of RottenPotato to the end of JuicyPotatoNG, I discovered a new technology by researching DCOM,...

Post Exploitation

March 21, 2023

Crassus: Windows privilege escalation discovery tool

Crassus Windows privilege escalation discovery tool Why “Crassus”? Accenture made a tool called Spartacus, which finds DLL hijacking opportunities on Windows. Using Spartacus as a starting point, we created Crassus to...

WinPwnage Windows Privilege Escalation Sherlock CVE-2018-0749

Exploitation / Post Exploitation

April 9, 2018

Windows Privilege Escalation Techniques and Scripts

Windows Privilege Escalation Windows Privilege Escalation Techniques and Scripts CopyAndPasteFileDownloader.bat Windows file transfer script that can be pasted to the command line. File transfers to a Windows machine can be...

Network PenTest / Post Exploitation

April 24, 2017

Hot Potato – Windows 7,8,10, Server 2008, Server 2012 Privilege Escalation in Metasploit & PowerShell

How Potato works Hot Potato (aka: Potato) takes advantage of known issues in Windows to gain local privilege escalation in default configurations, namely NTLM relay (specifically HTTP->SMB relay) and NBNS...