Local Admin in less than 60 seconds #BSidesBUD2024

Nikos Vourdas - Local Admin in less than 60 seconds: My guilty pleasure This presentation was held at #BSidesBUD2024 IT security conference on 23th May 2024. Local Privilege Escalation, also known as LPE, refers to the process of elevating user privileges on a computing system or network beyond what is intended, granting unauthorized access to resources or capabilities typically restricted to higher privilege levels. Gaining local admin privileges during red teaming significantly enhances the potential for lateral movement and access to additional resources. Modern environments offer unprecedented opportunities to gain local admin privileges more easily than one might imagine. The days of relying solely on traditional techniques such as exploiting unquoted service paths, weak service permissions, misconfigured AlwaysInstallElevated policies etc. are long gone (still possible but rare). Thus, in this presentation, we will explore together some alternative and realistic methods for escalating privileges and moving laterally within an internal network, inspired by my recent engagements. https://bsidesbud.com All rights reserved. #BSidesBUD2024 #lpe #cybersecurity