A script that helps in abusing a Windows privilege

Off-topic Exploits
, ,
3

Thanks for the script, will check it out :slight_smile:

FYI technically that backup privilege isn’t an “AD privilege”. Its just a local machine priv that exists on all non domain machines as well, like every other privilege shown here: Privilege Constants (Winnt.h) - Win32 apps | Microsoft Learn

But yeah if you have that priv on a machine that happens to be an AD domain controller then you can abuse it to grab files that relate to AD like NTDIS.DIT.