u/Final-Finish1160

Help : Regarding the Terminology

  • We found out that the PowerShell script (backupprep.ps1) runs with administrator privileges every 2 minutes
  • We had read and write access to this script, which allowed us to modify it
  • We added code to the script that adds the user john to the administrators group
  • After waiting for the scheduled task to run, we confirmed that john was successfully added to the administrators group

What kind of attack is this?

What type of attack was being used to escalate the privileges in the above example? (Format: two words)

Its not Privilege Escalation
Its not Task Manipulation
Its not Script Injection
Its not Task Hijacking

What is it?

reddit.com
u/Final-Finish1160 — 9 days ago