Tradecraft Security Weekly Subscribe

Windows Privilege Escalation Techniques – Tradecraft Security Weekly #2

May 19, 2017

Full Audio

View Show Index

Segments

1. Windows Privilege Escalation Techniques (Local) – Tradecraft Security Weekly #2

In episode 2 of Tradecraft Security Weekly Beau Bullock (@dafthack) discusses Windows privilege escalation techniques. There are many reasons why normal employees should not be local administrators of their own systems. Network administrators tend to lock down permissions correctly for users, but privilege escalation vulnerabilities still arise through various software or system configuration. A few tools and techniques for discovering these vulnerabilities include PowerUp (by @harmj0y), Hot Potato (by foxglovesec), and manually finding exploits for missing MS patches with Searchsploit are discussed. Links: PowerUp by harmj0y: https://github.com/PowerShellMafia/PowerSploit/tree/master/Privesc Potato by foxglovesec: https://github.com/foxglovesec/Potato Tater (PowerShell Implementation of Hot Potato exploit): https://github.com/Kevin-Robertson/Tater SessionGopher: https://github.com/fireeye/SessionGopher

Related

Incident Response

Preparation: The Less Shiny Side of Incident Response – Joe Gross – ESW #360

May 2, 2024

It's the most boring part of incident response. Skip it at your peril, however. In this interview, we'll talk to Joe Gross about why preparing for incident response is so important. There's SO MUCH to do, we'll spend some time breaking down the different tasks you need to complete long before an incident occurs. Resources 5 Best Practices for Bu...

RSA Conference, Verizon DBIR, funding, reports, partnerships and more – ESW #360

May 2, 2024

It's the week before RSA and the news is PACKED. Everyone is trying to get their RSA announcements out all at once. We've got announcements about funding, acquisitions, partnerships, new companies, new products, new features... To make things MORE challenging, everyone is also putting out their big annual reports, like Verizon's DBIR and Mandiant'...

Vulnerability Management

ChatGPT Writes Exploits – PSW #827

May 1, 2024

ChatGPT writes exploits, banning default and weak passwords, forget vulnerabilities just get rid of malware, IR blasting for fun and not profit, creating fake people, shattered dreams and passkey, and removing chips.