Q: what can you do when you have #mimikatz🥝 & some Read access on Windows system files like SYSTEM, SAM and SECURITY?
A: Local Privilege Escalation 🥳
Thank you @jonasLyk for this Read access on default Windows😘
A: Local Privilege Escalation 🥳
Thank you @jonasLyk for this Read access on default Windows😘
Ho, and this is not only SAM, but also SYSTEM & SECURITY.
So you can find "interesting" data, like:
- default windows install password (can be valid, trust me 👍)
- DPAPI computer keys (decrypt all computer private keys, etc.)
- Computer Machine account (silver ticket)
- ...
So you can find "interesting" data, like:
- default windows install password (can be valid, trust me 👍)
- DPAPI computer keys (decrypt all computer private keys, etc.)
- Computer Machine account (silver ticket)
- ...
Affected versions / Not affected versions on my tests today:
And the usual video quality link: video.twimg.com/tweet_video/E6…
I saw a lots of tweet about tools or some lolbin around it
You know that it works with [System.IO.File]::Copy() ?
You know that it works with [System.IO.File]::Copy() ?
• • •
Missing some Tweet in this thread? You can try to
force a refresh
