admin/g3tsyst3m-elevationstation
1
0
Fork 0
mirror of https://github.com/g3tsyst3m/elevationstation synced 2026-06-08 14:18:25 +00:00
Code Issues Packages Projects Releases Wiki Activity
59 Commits 1 Branch 7 Tags
main
Commit Graph

59 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
msifanguy b2664ca8b0 Delete mig2.dll 
AV hates this now so need to figure out another way to use it
 2023-11-02 19:52:49 -04:00
Robbie Corley fe3a2c64ea bitwise helper files 2023-08-16 22:45:12 -04:00
Robbie Corley 028c39e64b Update elevationstation.cpp 2023-08-12 22:06:58 -04:00
Robbie Corley d6d21575bc Update elevationstation.cpp 2023-08-12 21:48:50 -04:00
R.B.C 55395ea1f8 Update README.md 2023-08-12 17:19:17 -04:00
Robbie Corley 1c0a17229d Update elevationstation.cpp 
- Replaced DLL injection with CreateRemoteThread for getting SYSTEM.  This method relies on the bitwise shiftright operation to encode the shellcode
- Added in a new option to become TRUSTEDINSTALLER!
-removed legacy code that I don't think this solution needs anymore
v1.6 		2023-08-12 15:31:10 -04:00
Robbie Corley 112b76c3ad replacing input() with cmd args 
c++ input() can be problematic.  Switching to using commandline args for input instead
v1.5 		2023-07-19 16:46:01 -04:00
Robbie Corley ba521d9901 unload the injected dll 
cleaning up
v1.4 		2023-07-03 11:13:51 -04:00
R.B.C a1b3abe693 Update README.md 2023-07-01 20:38:49 -04:00
Robbie Corley 8e5461d2c6 Update elevationstation.cpp 2023-07-01 20:14:58 -04:00
Robbie Corley a29309915d forgot to include the download for the dll ;) 2023-07-01 20:09:11 -04:00
Robbie Corley 4584d193a1 Beeg update! DLL injection added!!! 
- Added DLL injection for yet another angle to secure a SYSTEM shell for you!
 2023-07-01 20:03:28 -04:00
Robbie Corley 20d9783d53 curl progress bar and color coded STDOUT! 
- Added a progress bar to curl to better interpret completed downloading of scripts
- Added colors to STDOUT for novelty and fun ;)
v1.3 		2023-06-20 21:30:01 -04:00
R.B.C 979caa9104 Update README.md 2023-06-20 14:13:31 -04:00
R.B.C 520387b6bb Update README.md 2023-06-20 12:11:42 -04:00
g3tsyst3m bfc69d3090 Update README.md 
fixed GIF quality
 2023-06-17 21:18:35 -04:00
msifanguy 765c605207 added automatic download of named pipe client 2023-06-17 19:13:10 -04:00
g3tsyst3m 28c7411f00 Update README.md 2023-06-17 14:41:00 -04:00
g3tsyst3m db5de38c53 Update README.md 2023-06-17 14:39:53 -04:00
Robbie Corley 4752fdf2a1 fixed AV detection issues with powershell 
changed to curl and that also improved download speeds
 2023-06-17 11:57:51 -04:00
Robbie Corley 0a894906f7 Update elevationstation.cpp 2023-06-17 09:35:35 -04:00
Robbie Corley 139783a293 UACBypass ready to use! 
this elevates the standard user to local admin (must be a members of the local admin group)
v1.2 		2023-06-16 23:33:24 -04:00
Robbie Corley d9487e7e8c UAC Bypass testing! 
also included a -h for viewing the commandline options instead of all the clutter when first running the program
 2023-06-16 23:20:03 -04:00
Robbie Corley 4cffd17db6 removed goto statements and tidying up things 2023-06-16 13:03:53 -04:00
Robbie Corley 8b71734b5f fixed an issue with CreateProcessAsUser 
dwCreationFlags = CREATE_UNICODE_ENVIRONMENT | CREATE_BREAKAWAY_FROM_JOB;
https://learn.microsoft.com/en-us/archive/blogs/alejacma/createprocessasuser-fails-with-error-5-access-denied-when-using-jobs
v1.1 		2023-06-16 10:10:07 -04:00
Robbie Corley 7f581fab49 replacing ShellExecuteW with WinExec for named pipe service 2023-06-14 17:30:27 -04:00
Robbie Corley 90329bb9e4 Merge branch 'main' of https://github.com/g3tsyst3m/elevationstation 2023-06-12 20:41:07 -04:00
Robbie Corley 78e8db13a8 Delete settokenprivs.h 2023-06-12 20:40:59 -04:00
g3tsyst3m d769b456ed Update README.md 2023-06-12 20:38:42 -04:00
Robbie Corley 147489de6a more tidying up code 2023-06-12 17:20:35 -04:00
Robbie Corley 066fa289b6 tidying up some... 2023-06-11 23:36:13 -04:00
Robbie Corley 0057112a3a Delete tokenpoacher.sln 2023-06-11 21:39:27 -04:00
Robbie Corley a351b6ffc4 Merge branch 'main' of https://github.com/g3tsyst3m/elevationstation 2023-06-11 21:32:21 -04:00
Robbie Corley d003e38911 changed name and includes namedpipeimpersonation now 2023-06-11 21:32:11 -04:00
g3tsyst3m 1e60405173 Update README.md 2023-06-11 21:27:43 -04:00
Robbie Corley be7c2ef342 Merge branch 'main' of https://github.com/g3tsyst3m/tokenpoacher 2023-06-10 23:30:00 -04:00
Robbie Corley b386bff01c Update tokenpoacher.cpp 2023-06-10 23:29:46 -04:00
g3tsyst3m 3d61fe8e5c Add files via upload 2023-06-10 23:28:57 -04:00
g3tsyst3m 28c53f3757 Update README.md 2023-06-10 21:17:32 -04:00
g3tsyst3m cb0fd45625 Update README.md 2023-06-10 21:05:29 -04:00
g3tsyst3m 212737e5df Update README.md 
added youtube in-depth walkthrough of TokenPoacher
 2023-06-10 19:22:01 -04:00
Robbie Corley a2a6b7f1dd Update tokenpoacher.cpp 2023-06-10 16:15:42 -04:00
Robbie Corley 7caec586fa Merge branch 'main' of https://github.com/g3tsyst3m/tokenpoacher v1.0 2023-06-10 09:29:34 -04:00
Robbie Corley 08e5936862 Update tokenpoacher.vcxproj 2023-06-10 09:29:25 -04:00
g3tsyst3m 39bc71252d Update README.md 2023-06-10 09:22:19 -04:00
Robbie Corley 6a3d09a0bb Merge branch 'main' of https://github.com/g3tsyst3m/tokenpoacher 2023-06-10 09:16:04 -04:00
Robbie Corley 4e2415499d Update .gitignore 2023-06-10 09:15:56 -04:00
g3tsyst3m 76522087ac Update README.md 2023-06-10 09:14:42 -04:00
Robbie Corley c291e97be3 Update .gitignore 2023-06-10 09:10:59 -04:00
g3tsyst3m 8aca26fd9f Update README.md 2023-06-10 09:02:34 -04:00