diff options
| author | Harmj0y <will@harmj0y.net> | 2016-06-03 22:43:12 -0400 |
|---|---|---|
| committer | Harmj0y <will@harmj0y.net> | 2016-06-03 22:43:12 -0400 |
| commit | 09d253f0700e637b410dbab26de037f1317d0401 (patch) | |
| tree | fe5a300a2e215865b30b165563b473c6be2ed6a8 /Privesc/Privesc.psd1 | |
| parent | 9711069b7e4458b3993aeacc1f336f97936408d9 (diff) | |
| download | PowerSploit-09d253f0700e637b410dbab26de037f1317d0401.tar.gz PowerSploit-09d253f0700e637b410dbab26de037f1317d0401.zip | |
Added Get-CurrentUserTokenGroupSid to enumerate all group SIDs the current user is a part of, regardless of being disabled.
Replaced 'whoami /groups' local admin + medium integrity check with comparison against Get-CurrentUserTokenGroupSid
Diffstat (limited to 'Privesc/Privesc.psd1')
| -rw-r--r-- | Privesc/Privesc.psd1 | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/Privesc/Privesc.psd1 b/Privesc/Privesc.psd1 index fe964a3..e4222bf 100644 --- a/Privesc/Privesc.psd1 +++ b/Privesc/Privesc.psd1 @@ -27,6 +27,7 @@ FunctionsToExport = @( 'Find-PathHijack', 'Find-ProcessDLLHijack', 'Get-ApplicationHost', + 'Get-CurrentUserTokenGroupSid', 'Get-ModifiablePath', 'Get-ModifiableScheduledTaskFile', 'Get-ModifiableService', |