Windows privesc with psexec -s cmd

Windows privesc with psexec -s cmd

Does this still work nowadays?

psexec -s cmd -s Run the remote process in the System account. 

https://i.redd.it/a7u4ppq2v5q71.gif

I tried it with psexec v2.34 but didn't work anymore

C:\>whoami pc\user C:\>PsExec.exe -s cmd PsExec v2.34 - Execute processes remotely Copyright (C) 2001-2021 Mark Russinovich Sysinternals - www.sysinternals.com Error creating key file on pc: The network name cannot be found. C:\>whoami pc\user C:\> 

.

C:\>whoami pc\user C:\>PsExec-v2.11.exe -s cmd PsExec v2.11 - Execute processes remotely Copyright (C) 2001-2014 Mark Russinovich Sysinternals - www.sysinternals.com Error establishing communication with PsExec service on pc: The network name cannot be found. C:\>whoami pc\user C:\> 

.

submitted by /u/w0lfcat
[link] [comments]


from hacking: security in practice https://ift.tt/3zK4pfj

Comments