How to escalate privileges to administrator in latest Windows.

Presented at BSidesLV 2017, July 25, 2017, 2 p.m. (25 minutes)

Attackers hope getting administrator privileges always. If they had get it, they can do anything. Therefore, they try to get administrator privileges in various ways, such as account stealing, privilege escalation, UAC bypass. I have found one way to escalate privileges to administrator without using vulnerability. I hope you to see the demo, understand the mechanism, and prepare against the attacks.

Presenters:

• Soya Aoyama - Researcher - Fujitsu System Integration Laboratories Limited
  Soya Aoyama is cyber security researcher at Fujitsu System Integration Laboratory. But this work has not been three years. Previously, Soya was developing LAN driver, Bluetooth profile, Winsock application etc. The first presentation of cyber security was AVTOKYO 2016.

Links:

• https://bsideslv2017.sched.com/event/BNGT/how-to-escalate-privileges-to-administrator-in-latest-windows
• https://infocon.org/cons/Security BSides/BSides Las Vegas/Bsides Las Vegas 2017/How to Escalate Privileges to Administrator i.mp4
• https://infocon.org/cons/Security BSides/BSides Las Vegas/Bsides Las Vegas 2017/How to Escalate Privileges to Administrator i.eng.srt (subtitles)
• https://www.youtube.com/watch?v=1U8Z8LF_FHs

Similar Presentations:

• DeepSec 2019 „Internet of Facts and Fears“ / Well, That Escalated Quickly! - A Penetration Tester's Approach to Windows Privilege Escalation
• RomHack 2018 / "whoami /priv" - show me your Windows privileges and I will lead you to SYSTEM