Privilege escalation – preparing vulnerable software

For this demonstration, I will be using a vulnerable software named Photodex taken from an Exploit Database website. You can download this software from https://www.exploit-db.com/exploits/24872/. Once the software is downloaded, install this software on our target machine. Once it's finished, restart the machine.

So now, let's try and create a nonadmin standard account in our target Windows machine by going to Control Panel | Add or remove user accounts | Create a new account. Let's call this one nonadmin. After creating the account log into the nonadmin account and navigate to the Photodex directory created while installation at C:\ drive and at the same time, open the Task Manager.

Get Python for Offensive PenTest now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.