Welcome to our lab environment.
I have here two machines.
This one here is a Windows 2016 machine, which will be our victim machine.
I'm logged here as Kenny, which is a regular user.
I also have here a Kali Linux version 2021.1,
which is not mandatory, but it will help us a lot during the attacks.
Let's get started by preparing the SharpUp tool for our attacks.
First, we need to download and compile the code so we can use the
tool. In a real red team engagement, you should do those steps on
a separate Windows machine and then only copy the executable file
to the victim computer.
But in here, just to make things easier,
I'll use the victim computer to download and compile the code.
So, let me go to the SharpUp GitHub, then click on this button,
Code, and then select the option Download ZIP. And this will
download the whole SharpUp code as a ZIP file.
Once the download is completed, we just need to open the ZIP and
extract the files to anywhere you want. In my case, I already
had extracted it to my desktop, so let's open the folder and
take a look what's inside.
Perfect.
Here we have a typical C# project, and you can use any C# compiler to
build the executable file. In my case, I already installed on this
machine Microsoft Visual Studio, so I can simply open this project
file. Done. As you can see here, I have the whole source code here. If I wanted,
I could even customize the code for any specific needs I might have.
So, let's compile this code. For that, I will go to the menu
Build, and then click on Build Solution.
Perfect.
As you can see here in the Output area, the code was compiled and the
executable was saved under the folder bin\Debug.
So let's take a look in that folder.
SharpUp, bin, and then Debug. Perfect.
We have here the executable file that we just compiled. And to make
things easier, I will move this file to my desktop.
All right, now we are ready to test the SharpUp, so
let me open my terminal here,
go to my desktop. And then to test SharpUp, we'll simply
execute it without any parameters.
Amazing.
Take a look.
The executable is working fine.
It gave us the help page to the tool.
As you can see here, the tool has 13 different modules that will
check several privilege escalation techniques.
In the next video, we'll explore those modules and see how
to get admin privilege to this computer.