{"uuid": "d4ea4be2-a6f6-4b52-b054-fded3e6a810a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/cissp/1682", "content": "Windows-Privilege-Escalation-\n\ud83d\udc4d\ud83c\udffd\nResources\n\nHackTheBox: \nhttps://www.hackthebox.eu/\n\nTryHackMe: \nhttps://tryhackme.com/\n\nTryHackMe Escalation Lab: \nhttps://tryhackme.com/room/windowsprivescarena\n\nIntroduction Fuzzy Security Guide: \nhttps://www.fuzzysecurity.com/tutorials/16.html\n\nPayloadAllTheThings: \nhttps://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Windows%20-%20Privilege%20Escalation.md\n\nAbsoloom's Guide: \nhttps://www.absolomb.com/2018-01-26-Windows-Privilege-Escalation-Guide/\n\nSushant 747's Guide: \nhttps://sushant747.gitbooks.io/total-oscp-guide/privilege_escalation_windows.html\n\nGaining a Foothold\nmsfvenom: https://netsec.ws/?p=331\n\nExploring Automated Tools\nwinpeas: https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/winPEAS\n\nWindows Priv Esc Checklist: \nhttps://book.hacktricks.xyz/windows/checklist-windows-privilege-escalation\n\nSherlock: \nhttps://github.com/rasta-mouse/Sherlock\n\nWatson: \nhttps://github.com/rasta-mouse/Watson\n\nPowerUp: \nhttps://github.com/PowerShellMafia/PowerSploit/tree/master/Privesc\n\nJAWS: \nhttps://github.com/411Hall/JAWS\n\nWindows Exploit Suggested: \nhttps://github.com/AonCyberLabs/Windows-Exploit-Suggester\n\nMetasploit Local Exploit Suggested: \nhttps://blog.rapid7.com/2015/08/11/metasploit-local-exploit-suggester-do-less-get-more/\n\nSeatbelt: \nhttps://github.com/GhostPack/Seatbelt\n\nSharpUp: \nhttps://github.com/GhostPack/SharpUp\n\nEscalation Path: Kernel Exploits\nWindows Kernel Exploits: https://github.com/SecWiki/windows-kernel-exploits\n\nKitrap0d Info: \nhttps://seclists.org/fulldisclosure/2010/Jan/341\n\nMS10-059: \nhttps://github.com/SecWiki/windows-kernel-exploits/tree/master/MS10-059\n\nEscalation Path: Passwords and Port Forwarding\nAchat Exploit: https://www.exploit-db.com/exploits/36025\n\nAchat Exploit (Metasploit): \nhttps://www.rapid7.com/db/modules/exploit/windows/misc/achat_bof\n\nPlink Download: \nhttps://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html\n\nEscalation Path: Windows Subsystem for Linux\nSpawning TTY Shell: https://netsec.ws/?p=337\n\nImpacket Toolkit: \nhttps://github.com/SecureAuthCorp/impacket\n\nImpersonation and Potato Attacks\nRotten Potato: https://foxglovesecurity.com/2016/09/26/rotten-potato-privilege-escalation-from-service-accounts-to-system/\n\nJuicy Potato: \nhttps://github.com/ohpe/juicy-potato\n\nGroovy Reverse Shell: \nhttps://gist.github.com/frohoff/fed1ffaab9b9beeb1c76\n\nAlternative Data Streams: https://blog.malwarebytes.com/101/2015/07/introduction-to-alternate-data-streams/\n\nEscalation Path: getsystem\ngetsystem Explained: https://blog.cobaltstrike.com/2014/04/02/what-happens-when-i-type-getsystem/\n\nEscalation Path: Startup Applications\nicacls Docs: https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/icacls\n\nEscalation Path: CVE-2019-1388\nZeroDayInitiative CVE-2019-1388: https://www.youtube.com/watch?v=3BQKpPNlTSo\n\nRapid7 CVE-2019-1388: https://www.rapid7.com/db/vulnerabilities/msft-cve-2019-1388\n\nCapstone Challenge\nBasic Powershell for Pentesters: https://book.hacktricks.xyz/windows/basic-powershell-for-pentesters\n\nMounting VHD Files: \n\nCapturing MSSQL Creds: \n\nSursa: https://github.com/Gr1mmie/Windows-Privilege-Escalation-Resources/blob/master/README.md", "creation_timestamp": "2026-09-01T17:01:11.137422Z"}