📓
📓
📓
📓
Red Team Notes
Search…
📓
📓
📓
📓
Red Team Notes
Introduction
Red Team Notes 2.0
Red Team
Initial Access
Execution
Persistence
Privesc
Access Token Manipulation
DLL Search Order Hijacking
Exploitation for Privesc
File System Permissions Weakness
Always Install Elevated
Defense Evasion
Credential Access
Discovery
Lateral Movement
Collection
Command and Control
Exfiltration
Impact
Active Directory
Introduction
Enumeration
Attacks
Detection
Detection
Initial Access
Execution
Resources & References
References & Resources
Powered By GitBook
Exploitation for Privesc
ID: T1068 Tactic: Privilege Escalation
Exploitation of a software vulnerability occurs when an adversary takes advantages of a programming error in a program, service, or within the operating system software or kernel itself to execute adversary-controlled code. Security constructs such as permission levels will often hinder access to information and use of certain techniques, so adversaries will likely need to perform Privilege Escalation to include use of software exploitation to circumvent those restrictions.
When initially gaining system access to a system, an adversary may be operating within a lower privileged process which will prevent them from accessing certain resources on the system. Vulnerabilities may exist, usually in operating system components and software commonly running at higher permissions, that can be exploited to gain higher levels of access on the system. This could enable someone to move from unprivileged or user level permissions to SYSTEM or root permissions depending on the component that is vulnerable. This may be a necessary step for an adversary compromising a endpoint system that has been properly configured and limits other privilege escalation methods.
​
Previous
DLL Search Order Hijacking
Next
File System Permissions Weakness
Last modified 2yr ago
Copy link