Hacking Articles Tips Tricks Videos Tutorials

Hacking Articles|Raj Chandel's Blog
Windows Privilege Escalation: Weak Services Permission

Microsoft Windows offers a wide range of fine-grained permissions and privileges for controlling access to Windows components including services, files, and registry entries. Exploiting misconfigured services is one technique to increase privileges.

Table of Content· MS Windows ServicesMS Windows Services, formerly known as NT services, enable you to create long-running executable applications that run in their own Windows sessions. These services can be automatically started when the computer boots, can be paused and restarted, and do not show any user interface. For each service, a registry key exists in HKLM\SYSTEM\CurrentControlSet\Services.Access Rights for the Service Control ManagerThe SCM creates a service object's security descriptor when the service is installed by the CreateServicefunction. The default security descriptor of a service object grants the following access. https://blogger.googleusercontent.com/img/a/AVvXsEiFttE9jcG1VLvRQuWtXFHO8RL9xTYivhYuE6bK8vLYzgptiVVAjbErTuAH1UVSbEytqIdzO4jBYaMm1nCXYLcyn5tMpTmr9Dt2xvxGnlIFkz-clpRAZTQDjl-SFr_oT32SAXDdIoB5g-Xu5nXGuZtdIOnaS0GHL4Vz2zApjDyWBndYgKW9BEwWg5aCjQ=s16000 Weak Service Permission Lab SetupThis article will help to set up a lab that focuses on two Windows weak service Permission misconfigurations that allow an attacker to get administrative privileges:Insecure Configuration File Permissions:A low-privileged user can update service settings, such as the service binary that runs when the service starts.Insecure Service Executable: When the service starts, a low-privileged user can overwrite the binary it launches.Steps for Weak Services Permissions Run CMD as administrator and execute the below command to create a service with the name of Pentest inside /temp directory ___________________________
@hacking_Attack
@Hacking_Video

Blogspot

Windows Privilege Escalation: Weak Services Permission

Hacking Articles is a very interesting blog about information security, penetration testing and vulnerability assessment managed by Raj Chandel.

7 viewsedited 00:32

Hacking Articles Tips Tricks Videos Tutorials

Hacking Articles|Raj Chandel's Blog Windows Privilege Escalation: Weak Services Permission Microsoft Windows offers a wide range of fine-grained permissions and privileges for controlling access to Windows components including services, files, and registry…

WQpMRTMfMjDJz852LxtIRObtc_Rdxco_w=s16000 Step2:To create a vulnerable service we need to assign some toxic privilege with the help of SubinACLto change the permission of services.SubInACL is a little-known command-line tool from Microsoft, yet it is one of the best tools to work with security permissions in Windows. This tool is capable of changing the permissions of files, folders, registry keys, services, printers, cluster shares and various other types of objects.https://blogger.googleusercontent.com/img/a/AVvXsEg0FCXuEdfOeMYWG8uIDG-c3WJ5D49Ooi2-9ccJSqDlfoV-OAM-Rpy_pFqw-f_-hhtI-WpdVRLfO83WprS9-DyNuYDqD3C38lyzljrNHwqbkv-9XK652LWKCgfVE0WQNbz35Q899VXI0zvPb9dh6HqFnsXNVVn4Bgn_sS5qHZmLvEC8oGm8XefAnq1JxA=s16000 Step3:After Download SubinACL, execute the following command to assign PTOC Permissions user “ignite” against “Pentest” service.Abusing Insecure Configuration File Permissions (PTOC)wmic service get name,startname,pathnamehttps://blogger.googleusercontent.com/img/a/AVvXsEilCW5T_7iB0sNBiRu5S0xs_RypzxvFEuj1x5acNRzSNTICuWJg2LSsXda35-RmRAinoJCPQOTtinScpyPFzmb1UMmiIAoqr9uqSy2nPTzAu4lpZwYf0T8YN_zMmZGdq7sOWrlPtj9Xb_n8wbpOHFTA-gc9gtD9BFwQ_HJ-pi6CzN6GyW4dFt53QDf3Bw=s16000 The service name shown as pentest exits the c:/temp directory, as shown in the following image. We may verify the service configuration with the following command.sc qc pentestThe service account type is Localsystem, and it has privileges to start, stop, and pause services, according to the output.accesschk.exe /accepteula –uwcqv ignite pentestIt says that Ignite user has full access to this service J shell.exe___________________________
@hacking_Attack
@Hacking_Video

11 viewsedited 00:32

Hacking Articles Tips Tricks Videos Tutorials

WQpMRTMfMjDJz852LxtIRObtc_Rdxco_w=s16000 Step2:To create a vulnerable service we need to assign some toxic privilege with the help of SubinACLto change the permission of services.SubInACL is a little-known command-line tool from Microsoft, yet it is one of…

er malicious shell.exe into C:/temp and start a new Netcat listener within Kali Linux.sc config pentest binPath= "C:\Users\Public\shell.exe"https://blogger.googleusercontent.com/img/a/AVvXsEjsp1O4U6pZqGDQYa28u6s6leNOTXd3V-iHqqW7s7hIg7B5KTCfPMvk9GcIdSIqOnphUe-glHHMEogkrxEeT4IX78QpuV3o6E2UKX0jzFyIHBys5B-a3wia4nC3cVqffb0Z6H4XvMlNYl4QPOKZS1waQ5cyFZsThMqkzJvg-BWSKER1NAXqvCYdIf6qEA=s16000 As soon as the service will launch, the attacker will get a reverse connection in the new netcat session as NT Authority \systemAbusing Insecure Service Executable (PTO)If the low-privilege user has at least Pause/continue, Start, and Stop permissions for the service, an attacker may attempt to overwrite the system binaries with a malicious executable file in order to escalate privileges.Metasploit ___________________________
@hacking_Attack
@Hacking_Video

10 viewsedited 00:32

Hacking Articles Tips Tricks Videos Tutorials

9 views00:47

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking Articles
Windows Privilege Escalation: Weak Services Permission

Microsoft Windows offers a wide range of fine-grained permissions and privileges for controlling access to Windows components including services, files, and registry entries. Exploiting misconfigured services is one technique to increase privileges. Table of Content MS Windows Services Access Rights for the Service Control Manager Weak Service Permission Lab Setup

The post Windows Privilege Escalation: Weak Services Permission appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles

Windows Privilege Escalation: Weak Services Permission

Learn Windows Privilege Escalation through weak service permissions, insecure configurations, and exploitation techniques like PTOC and PTO.

10 viewsedited 00:47

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Overly Complex IT Infrastructures Pose Security Risk

Cybersecurity budgets are set to increase in 2022, but companies worry that complex IT networks and data infrastructure are wasting money, new PwC survey finds.

10 views01:42

Source

Hacking Articles Tips Tricks Videos Tutorials

Deep Web
Is it possible to find deleted tweets, deleted content, deleted info (that was once public) about a specific person who was not famous/popular?

submitted by /u/MrXbox1000
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Is it possible to find deleted tweets, deleted content, deleted...

Posted in r/deepweb by u/MrXbox1000 • 2 points and 0 comments

9 viewsedited 03:31

About

Blog

Apps

Platform