Local PrivEsc Commands

4 Local PrivEsc commands from the Privilege Escalation category, each with its placeholders, supported authentication methods and upstream references.

Tools covered: nxc

• NetExec SMB Enum Impersonate Enumerate tokens and privileges available for impersonation on remote hosts
• NetExec SMB MS17-010 (EternalBlue) Check for MS17-010 (EternalBlue) vulnerability without credentials
• NetExec SMB PrintNightmare Exploit PrintNightmare (CVE-2021-1675/34527) to load a malicious DLL via the Print Spooler service
• NetExec SMB SMBGhost Check for SMBGhost (CVE-2020-0796) SMBv3 compression vulnerability without credentials