▲ 1 r/hackthebox
Help : Regarding the Terminology
- We found out that the PowerShell script (
backupprep.ps1) runs with administrator privileges every 2 minutes - We had
readandwriteaccess to this script, which allowed us to modify it - We added code to the script that adds the user
johnto the administrators group - After waiting for the scheduled task to run, we confirmed that
johnwas successfully added to the administrators group
What kind of attack is this?
What type of attack was being used to escalate the privileges in the above example? (Format: two words)
Its not Privilege Escalation
Its not Task Manipulation
Its not Script Injection
Its not Task Hijacking
What is it?
u/Final-Finish1160 — 9 days ago