privesc-windows-tokens
Fail
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill provides a step-by-step guide on how to escalate privileges from a service or web account context (IIS, MSSQL) to NT AUTHORITY\SYSTEM.
- [PRIVILEGE_ESCALATION]: Specifically instructs on the abuse of SeImpersonatePrivilege and SeAssignPrimaryTokenPrivilege using the 'Potato' family of exploits.
- [PRIVILEGE_ESCALATION]: References and encourages the use of specialized exploitation tools including PrintSpoofer, GodPotato, and JuicyPotatoNG to obtain SYSTEM tokens.
- [COMMAND_EXECUTION]: Provides functional command-line payloads for spawning SYSTEM shells and executing commands, such as 'PrintSpoofer.exe -i -c cmd' and 'GodPotato -cmd "cmd /c whoami"'.
Recommendations
- AI detected serious security threats
Audit Metadata