+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Privilege Escalation Windows (/showthread.php?tid=6283700)
Privilege Escalation Windows - tacobella2 - Oct 30, 2024
Hi
when it comes to linux there are numerous misconfigurations or exploits to run and use and most likely no antivirus
as for windows, most users are very limited and isolated not just by the system default but mostly by the antivirus
aside from windows services misconfigurations. my question is. people who still take advantage of tools like mimikatz, localpotato .. etc.
how do they allow these files to get in without disabling antivirus (which requires higher access they trying to gain)
for what i know mostly obfuscation is the only way but eg windows defender is very updated and patches bypasses pretty quick and some even automatically.
are such tools too dirty to be used or obfuscated now in 2024?
is this the best it gets?
RE: Privilege Escalation Windows - DramaKing - Oct 30, 2024
(Oct 30, 2024 09:46 AM)tacobella2 Wrote: Hi
when it comes to linux there are numerous misconfigurations or exploits to run and use and most likely no antivirus
as for windows, most users are very limited and isolated not just by the system default but mostly by the antivirus
aside from windows services misconfigurations. my question is. people who still take advantage of tools like mimikatz, localpotato .. etc.
how do they allow these files to get in without disabling antivirus (which requires higher access they trying to gain)
for what i know mostly obfuscation is the only way but eg windows defender is very updated and patches bypasses pretty quick and some even automatically.
are such tools too dirty to be used or obfuscated now in 2024?
is this the best it gets?
Mimikatz is going to be difficult to crypt. Its behavior is too well known, and LSASS has too many protections since Microsoft increased the security baseline.
RE: Privilege Escalation Windows - tacobella2 - Oct 30, 2024
(Oct 30, 2024 10:08 AM)DramaKing Wrote: Mimikatz is going to be difficult to crypt. Its behavior is too well known, and LSASS has too many protections since Microsoft increased the security baseline.
what would be doable or accessible with antivirus active and windows defender filtering ps cmds. basic obfuscation trials like msfvenom meterpreter obfuscated n singed with ScareCrow .. etc are still blocked
im wondering cause some people claim there's so much to do on such a closed environment
RE: Privilege Escalation Windows - DramaKing - Oct 30, 2024
(Oct 30, 2024 11:04 AM)tacobella2 Wrote: what would be doable or accessible with antivirus active and windows defender filtering ps cmds. basic obfuscation trials like msfvenom meterpreter obfuscated n singed with ScareCrow .. etc are still blocked
im wondering cause some people claim there's so much to do on such a closed environment
Pop UAC prompts on a loop until access is granted.