54 Followers
3 Following
3 Posts
Administrator Protection, introduced in the latest Windows Insider Canary build, is a solid security enhancement... uhh.. really?? can be bypassed with @splinter_code's clever SspiUacBypass tool. Check it out here: https://github.com/antonioCoco/SspiUacBypass https://pic.x.com/WLry1GlObR
GitHub - antonioCoco/SspiUacBypass: Bypassing UAC with SSPI Datagram Contexts

Bypassing UAC with SSPI Datagram Contexts . Contribute to antonioCoco/SspiUacBypass development by creating an account on GitHub.

GitHub
We did it again with #LocalPotato!
A not-so-common NTLM reflection attack allowing for arbitrary read/write. Basically EoP from user to SYSTEM.
Tracked as #CVE-2023-21746 - Windows NTLM EoP
Soon more details --> http://localpotato.com
cc
@splinter_code
www.localpotato.com