Anvilpoint CyberOps - Hacker for Hire ◆ Spoof Call and Spoof SMS set any caller ◆ Cheap KYC Verifications & Openups ◆ ProxiesFood: Unlimited Residential Proxy ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Tech Coding Software Development › [C#] [POC] From Administrator to Nt Authority\System

New Reply 
C# 

[POC] From Administrator to Nt Authority\System
Paskowsky
Paskowsky Offline
Unknown coder
**
HF l33t
Posts:
174
Threads:
19
Credibility:
100
Popularity:
49
βytes:
β 0
Game XP:
0
Nov 18, 2019 11:46 AM
From Administrator To Nt Authority\System

If you want check out my blog where I explain how it works!

https://blog.dreamsoftwares.cc/2019/11/1...itysystem/

Code :



Hope you enjoy and if you have any question or suggestion please comment down here!
Paskowsky's coding service
- C# - VB.NET - NodeJs -
gigajew
gigajew Offline
Notorious like BIG but a jew
***
HF l33t
Posts:
1,760
Threads:
209
Credibility:
000
Popularity:
757
βytes:
β 0
Game XP:
2,401
Nov 18, 2019 06:06 PM
Cool post, but it's no exploit just basic token cloning to gain other privileges?
[Image: Syr3DlV.png]
Paskowsky
Paskowsky Offline
Unknown coder
**
HF l33t
Posts:
174
Threads:
19
Credibility:
100
Popularity:
49
βytes:
β 0
Game XP:
0
Nov 19, 2019 02:44 AM
(Nov 18, 2019 06:06 PM)gigajew Wrote:  Cool post, but it's no exploit just basic token cloning to gain other privileges?

Yes, I've never mentioned exploiting 🤣

Have a good day 🤝
Paskowsky's coding service
- C# - VB.NET - NodeJs -
Accord
Accord Offline
[bin@HF:]
***
HF l33t
Posts:
1,510
Threads:
15
Credibility:
400
Popularity:
200
βytes:
β 0
Game XP:
4,545
Nov 21, 2019 08:12 PM
Your blog is a good read for a begginer like me. I followed everything and what is being happened.

/3f577][Image: 2eb99610.gif]
Kallu609
Kallu609 Offline
[user@HF:]
*
Registered
Posts:
181
Threads:
11
Credibility:
600
Popularity:
17
βytes:
β 0
Game XP:
0
Nov 21, 2019 09:05 PM (This post was last modified: Nov 21, 2019 09:06 PM by Kallu609.)
This is great repo too: GitHub - rootm0s/WinPwnage: UAC bypass, Elevate, Persistence and Execution methods
There's 7 different elevation techniques there.
Đạt Phan
Đạt Phan Offline
[n00b@HF:]
*
Registered
Posts:
2
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Nov 22, 2019 12:24 AM
please can you give me pass
Kallu609
Kallu609 Offline
[user@HF:]
*
Registered
Posts:
181
Threads:
11
Credibility:
600
Popularity:
17
βytes:
β 0
Game XP:
0
Nov 22, 2019 03:44 AM
(Nov 22, 2019 12:24 AM)Đạt Phan Wrote:  please can you give me pass

What pass? Password? Where? Are u ok? 👹
Fr3eD0M
Fr3eD0M Offline
[user@HF:]
*
Registered
Posts:
395
Threads:
3
Credibility:
000
Popularity:
39
βytes:
β 0
Game XP:
0
Nov 22, 2019 08:10 AM
I have read your blog.Very nice tutorial.
Thanks for share
0x414243ffffff
0x414243ffffff Offline
[n00b@HF:]
*
Registered
Posts:
24
Threads:
1
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Nov 28, 2019 02:41 PM
ermm you can do the same in metasploit i guess for token stealing
BadByte
BadByte Offline
[n00b@HF:]
*
Registered
Posts:
56
Threads:
1
Credibility:
000
Popularity:
5
βytes:
β 0
Game XP:
0
Nov 30, 2019 08:12 PM
Nice and Thanks, i'll try this!
tux1
tux1 Offline
rep 4 rep
*****
HF Ub3r
Posts:
10,922
Threads:
54
Credibility:
100
Popularity:
1,202
βytes:
β 0
Game XP:
3
Dec 1, 2019 08:15 AM
Very interesting, thanks for sharing!

Hey there,
If I have helped you or if you just enjoy my posts, please consider donating bitcoin to me 1DpL2kcxuidEsjt2MMN2AYufcVoXbi3v2X

[Image: FtwuQgr.gif]
Hannah
Hannah Offline
[n00b@HF:]
*
Registered
Posts:
9
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Dec 12, 2019 05:05 PM
Nice, thanks for sharing. Will use this soon
BadByte
BadByte Offline
[n00b@HF:]
*
Registered
Posts:
56
Threads:
1
Credibility:
000
Popularity:
5
βytes:
β 0
Game XP:
0
Jan 9, 2020 11:07 AM (This post was last modified: Jan 9, 2020 11:08 AM by BadByte.)
escalation doesn't work for me!

I integrated it into my client, it all seems to be performing as it should be but nothing is happening on the side escalation!.
Tested on Win7(32) for moment and nothing and without AV.

Always working? It's me (my code..)?
Just to known or to understand where is my error, just to advance..

Ty.

Cap1
Spoiler (Click to View)
Cap2
Spoiler (Click to View)
Cap3
Spoiler (Click to View)
Cap4
Spoiler (Click to View)

I just modified in the Class the PathFileName, isn't "winlogon", the name of target_process is sended by the server (see capture) but i think all is OK, my code seem just, then i don't know...
Paskowsky
Paskowsky Offline
Unknown coder
**
HF l33t
Posts:
174
Threads:
19
Credibility:
100
Popularity:
49
βytes:
β 0
Game XP:
0
Jan 9, 2020 11:23 AM
You have to be atleast in the administrator group to escalate to ntauthority.

This is not an exploit!

Regards,
Paskowsky
Paskowsky's coding service
- C# - VB.NET - NodeJs -
BadByte
BadByte Offline
[n00b@HF:]
*
Registered
Posts:
56
Threads:
1
Credibility:
000
Popularity:
5
βytes:
β 0
Game XP:
0
Jan 9, 2020 11:46 AM (This post was last modified: Jan 10, 2020 06:46 AM by BadByte.)
(Jan 9, 2020 11:23 AM)Paskowsky Wrote:  You have to be atleast in the administrator group to escalate to ntauthority.

This is not an exploit!

Regards,
Paskowsky

Ok, but my user is the admin, i haven't verified but i think this account is in admin group!
I'll apply the modifications and i'll add an function to be sure the user is in good group..

Thx for reply, i'll try so later, i'm in pause ^^ :p

Re.
I'm already in admin groupe :(

I spent the night on it, it's not that the class is complex, it's just that it works with a client suddenly every time I have to recompile, test and it's boring serious: p
I checked the membership of the user in the admin group admin it is, ok, I get all the SIDs of the user, I checked if it is a SID / adm_grp and if not then I add it to the group and if yes then: escalation (filepath), but none of this allows you to see this Class escalate cmd.exe ..

In any case it gave me ideas, I will work on SIDs (cloning, copying, new ..)
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
[Legends] by HackersJan 17, 2026 04:24 PM 20 828 Jan 17, 2026 04:24 PM
Last Post: Hackers
[.NET] by xloaderJul 8, 2025 09:28 AM 9 2,133 Jul 8, 2025 09:28 AM
Last Post: Mumbaiboys
[Source] by KrishnaGangaMay 28, 2025 01:46 AM 2 404 May 28, 2025 01:46 AM
Last Post: KrishnaGanga