Windows Privilege Escalation

Intelligence from the dark web shows that the Dark Kittens plan to attack Globomantics. Your challenge is to test the overall security posture of the Globomantics server build. You will be provided with a low-privileged account. In this lab, you will practice penetration testing a single Windows Server. When you are finished, you will have experience performing local privilege escalation leading to full SYSTEM access on the host. You will explore privilege escalation opportunities such as: - Credentials in Files - Insecure Desktop Shortcuts - Unquoted Service Paths - Service Registry Writable Vulnerabilities - Insecure File and Folder Permissions - Image File Execution Options - Misconfigured Privileges - AlwaysInstallElevated Vulnerabilities - DLL Hijacking Vulnerabilities - Token Impersonation