- An (almost) syscall-only BOF file intended to either add or remove token privileges within the context of your current process.
- Justin Lucas (@the_bit_diddler)
- Brad Campbell (@hackersoup)
- There are many boilerplate options to enable a specific subset of privileges; traditionally, this has been almost entirely centered around
SE_DEBUG
git clone https://github.com/EspressoCake/Toggle_Token_Privileges_BOF.git
cd Toggle_Token_Privileges_BOF/src
make
- Load the
Aggressor
.cna
file from thedist
directory, after building - Determine whatever relative privilege number (see the help menu) you wish to apply to your current process token
- From a given
Beacon
:# Getting general help syscall_enable_priv # Adding a privilege (SE_DEBUG) syscall_enable_priv 20 # Removing a privilege (SE_DEBUG) syscall_disable_priv 20
- Currently, the
Aggressor
script has safeguards