Privilege Escalation

Primary Access Token ManipulationWindows NamedPipes 101 + Privilege EscalationDLL HijackingWebShellsImage File Execution Options InjectionUnquoted Service PathsPass The Hash: Privilege Escalation with Invoke-WMIExecEnvironment Variable $Path InterceptionWeak Service Permissions
PreviousDetecting Sysmon on the Victim HostNextPrimary Access Token Manipulation