Posts

Showing posts with the label PowerShell Hot Potato Windows Privilege Escalation Exploit: Tater

PowerShell Hot Potato Windows Privilege Escalation Exploit: Tater

Image
PowerShell Hot Potato Windows Privilege Escalation Exploit Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit. Functions Invoke-Tater The main Tater function. Parameters IP – Specify a specific local IP address. An IP address will be selected automatically if this parameter is not used. SpooferIP – Specify an IP address for NBNS spoofing. This is needed when using two hosts to get around an in-use port 80 on the privesc target. Command – Command to execute as SYSTEM on the localhost. Use PowerShell character escapes where necessary. NBNS – Default = Enabled: (Y/N) Enable/Disable NBNS bruteforce spoofing. NBNSLimit – Default = Enabled: (Y/N) Enable/Disable NBNS bruteforce spoofer limiting to stop NBNS spoofing while hostname is resolving correctly. ExhaustUDP – Default = Disabled: (Y/N) Enable/Disable UDP port exhaustion to force all DNS lookups to fail in order to fallback to NBNS resolution. HTTPPort – Default = 80: Specify a TCP port for the H...