Local Privilage Escalation Cheatsheet

Tags:template Related to:note-taking,notes See also: Index: 🗂️ Index of CRTP

Service Issues using PowerUp

FunctionCommand
Get services with unquoted paths and a space in their nameGet-ServiceUnquoted -Verbose
Get services where the current user can write to its binary path or change arguments to the binaryGet-ModifiableServiceFile -Versbose
Get services whose configuration can be modified by current userGet-ModifiableService -Versbose

Run all checks using tools

ToolCommand for running all checks
PowerUpInvoke-AllChecks
BeRoot.\beRoot.exe
PrivescInvoke-PrivEsc