This Metasploit module utilizes the Net-NTLMv2 reflection between DCOM/RPC to achieve a SYSTEM handle for elevation of privilege. It requires a CLSID string.
5e3f05cf275d9d2ae02e2d4ec7ec57c79e4e8a2edb6c3200d02245aa852d0dda
This Metasploit module utilizes the Net-NTLMv2 reflection between DCOM/RPC to achieve a SYSTEM handle for elevation of privilege. Currently the module does not spawn as SYSTEM, however once achieving a shell, one can easily use incognito to impersonate the token.
10aca5238c09e9bf6cc039620feb2267cc144082ac9a5d8868637ad860f00b93