Privilege Escalation in Action: Using PSSPY 🔍 Here’s a real-time look at how a root process (SSHD) triggered malicious code execution, flipping a root shell into an SUID shell. Key Takeaways: → The process ran as root, leading to a change in ownership and the creation of an SUID binary. → By running PSSPY, we could monitor processes without root access, making it a powerful tool for enumeration. → PSSPY acts like a Swiss Army knife for tracking live processes, helping spot privilege escalations

Three ways to level up your Windows Privilege Escalation skills! #windows #privesc | TCM Security