Group Policy Attack Tools

SharpGPOAbuse

Repo: https://github.com/FSecureLABS/SharpGPOAbuse

Location: /root/SharpGPOAbuse.exe

Usage:

  • See repo, too many examples

./SharpGPOAbuse.exe --AddLocalAdmin --UserAccount $REALUSER --GPOName “Default Domain Policy”

See also : https://github.com/rootSySdk/PowerGPOAbuse/blob/master/PowerGPOAbuse.ps1

PreviousPersistenceNextService Account Exploits

Last updated