Churrasco
Classic token kidnapping to SYSTEM on Windows Server 2003.
A classic token-kidnapping exploit to get SYSTEM on Windows Server 2003. It abuses a service account's impersonation privileges to run a command as SYSTEM.
Family Privilege escalation
Flags -d '<cmd>'
Concepts churrasco (token kidnapping)
Cheatsheet Token privileges → SYSTEM
Installation
# Binario precompilado (máquinas heredadas)Useful commands
Appears in
Some machines where its use is documented; not an exhaustive list.