Windows Privilege Escalation Skills Assessment - Part II

[Thien]

Just my 2 cents on this exercise:

[ACADEMY] Windows Privilege Escalation Skills Assessment - Part II

Actually, going through the WinPEAS detailed report is pretty exhausting! Fortunately, I started with a smaller automatic tool which helps enumerating things: SharpUp.exe audit and I got all it needs to find 2 first answers at once… The most impactful to me was that these 2 discoveries just rely on one contextual fact about the pentest itself: we are actually auditing a Gold Image, which means there probably are administrative shortcuts in order to do things faster… tehy forgot t…