New Generation of PEAS
Carlos Polop presents the new generation of PEAS (LinPEAS/WinPEAS), revealing advanced local privilege escalation techniques across Windows, Linux, and AD.
Summary
The Evolution of Local Privilege Escalation
Local privilege escalation (LPE) has evolved far beyond checking kernel version exploits, searching for unquoted service paths, or scanning SUID binaries.
Automating Multi-Vector Escalation with PEAS
Carlos Polop details the architecture and heuristics behind LinPEAS and WinPEAS, designed to enumerate obscure misconfigurations, cached credentials, and token privileges.
Uncovering Domain Compromise Pathways from Local Access
Polop demonstrates how local system enumeration uncovers Active Directory certificate templates, DPAPI secrets, and service credentials that facilitate full domain compromise.
Hardening Operating Systems Against Automated Auditing
The author provides defensive configuration baselines to eliminate common privilege escalation vectors and audit anomalous process scanning.
Related talks
Main Stage·54 min
Christopher Panayi
Christopher Panayi demonstrates exploiting Microsoft Endpoint Configuration Manager (MECM/SCCM) OS deployment mechanisms and network booting to extract enterprise Active Directory credentials.
Main Stage·46 min
Tianze Ding
Tianze Ding demonstrates chaining Microsoft Exchange vulnerabilities with Active Directory trusts, escalating a low-privilege domain user to full Domain Admin.
Main Stage·43 min
Jacob Baines
Abusing Windows print driver installation as a path from low privilege toward SYSTEM.