#PrivescCheck - Twitter Hashtag

almost 5 years ago

Thanks to @SAERXCIT, #PrivescCheck now enumerates volume shadow copies and checks whether SAM/SYSTEM/SECURITY files are readable as a low-priv user. #HiveNightmare #SeriousSAM 👉 https://t.co/GS4Clqyomf

itm4n's tweet photo. Thanks to @SAERXCIT, #PrivescCheck now enumerates volume shadow copies and checks whether SAM/SYSTEM/SECURITY files are readable as a low-priv user. #HiveNightmare #SeriousSAM

👉 https://t.co/GS4Clqyomf https://t.co/GudcEgkSfT

0

118

40

14

0

Clément Labro @itm4n

almost 5 years ago

Another update for #PrivescCheck. It now checks for system configurations that are vulnerable to the #printnightmare LPE (on fully up-to-date machines) It's based on MS recos and doesn't take into account the latest technique demonstrated by @gentilkiwi https://t.co/GS4Clqyomf

itm4n's tweet photo. Another update for #PrivescCheck. It now checks for system configurations that are vulnerable to the #printnightmare LPE (on fully up-to-date machines)

It's based on MS recos and doesn't take into account the latest technique demonstrated by @gentilkiwi

https://t.co/GS4Clqyomf https://t.co/4tT1y7rAOd

2

108

37

13

0

Clément Labro @itm4n

almost 5 years ago

I updated #PrivescCheck based on jonas' finding. It now tells you if SAM/SYSTEM/SECURITY files are readable. Note that if they are readable, you won't be able to read them directly. A shadow copy is required as highlighted by @jonasLyk . https://t.co/GS4Clqyomf

itm4n's tweet photo. I updated #PrivescCheck based on jonas' finding. It now tells you if SAM/SYSTEM/SECURITY files are readable.

Note that if they are readable, you won't be able to read them directly. A shadow copy is required as highlighted by @jonasLyk .

https://t.co/GS4Clqyomf https://t.co/kmyh5MfFFX

Jonas L

@jonasLyk

almost 5 years ago

yarh- for some reason on win11 the SAM file now is READ for users. So if you have shadowvolumes enabled you can read the sam file like this: I dont know the full extent of the issue yet, but its too many to not be a problem I think.

jonasLyk's tweet photo. yarh- for some reason on win11 the SAM file now is READ for users.
So if you have shadowvolumes enabled you can read the sam file like this:

I dont know the full extent of the issue yet, but its too many to not be a problem I think. https://t.co/kl8gQ1FjFt

34

964

389

77

0

200

68

24

0

Ludovico Loreti @LudovicoLoreti

over 6 years ago

PrivescCheck - Privilege Escalation Enumeration Script For Windows https://t.co/xrYkbvZveW #CommonVulnerabilities #Lsass #Misconfigurations #PowerShell #PowerUp #PrivescCheck

0

2

1

0

Top Tweets for #PrivescCheck

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users