PaperTsar – WindowsTechs.com

How to run PrintSpoofer in memory from powershell?

Posted on March 30, 2021 by PaperTsar

PrintSpoofer uses named pipe impersonation to elevate on Windows 10 to SYSTEM from a user with SeImpersonatePrivilege (Local Service, Network Service, Administrator etc.). The compiled version is detected by Windows Defender, therefore it … Continue reading How to run PrintSpoofer in memory from powershell?→

How to gain code execution through access to CIFS service on Windows?

Posted on March 20, 2021 by PaperTsar

Is it possible to gain code execution on a machine through access to CIFS service? And if so, how? In my case, I have a valid Kerberos TGS to CIFS service running on a host and I am able to copy and download files. I want to get a shell au… Continue reading How to gain code execution through access to CIFS service on Windows?→