SeRestore Privilege -> Administrator

[RajChowdhury240]

This is an amazing project by xct.

https://github.com/xct/SeRestoreAbuse

.\SeRestoreAbuse.exe "cmd /c net localgroup administrators <local-username-to-be-added-as-adminstrator> /add"

is it possible to integrate this with nxc

Scenario : low priv user having SeRestorePrivilege can Escalate Direct to Administrator using nxc itself

[Marshall-Hallenbeck]

From the code it looks like it just sets a regkey for SecLogon and then starts the service with powershell, so you can do that with the reg-query module, then just run the powershell with -X.

[NeffIsBack]

Feel free to contribute such a module :)