module

Windows Manage User Level Persistent Payload Installer

Try Surface Command
Back to search
Disclosed
2013-01-02
Created
2018-05-30

Description

Creates a scheduled task that will run using service-for-user (S4U).
This allows the scheduled task to run even as an unprivileged user
that is not logged into the device. This will result in lower security
context, allowing access to local resources only. The module
requires 'Logon as a batch job' permissions (SeBatchLogonRight).

Authors

Thomas McCarthy "smilingraccoon" smilingraccoon@gmail.com
Brandon McCann "zeknox" bmccann@accuvant.com

Platform

Windows

References

Module Options

To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:


    msf > use exploit/windows/local/s4u_persistence
    msf exploit(s4u_persistence) > show targets
        ...targets...
    msf exploit(s4u_persistence) > set TARGET < target-id >
    msf exploit(s4u_persistence) > show options
        ...show and set options...
    msf exploit(s4u_persistence) > exploit
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today