avatar

SecOps 118: Service Account Backdoors

Galactic Advisors
Galactic Advisors
Episode • May 14, 2023
Service Accounts are a common method hackers leverage in order to maintain persistent access, especially when the service path doesn't include quotes. What are the different local and domain service accounts, and how can they be leveraged? #scripts

Link: https://portal.galacticscan.com/go/86/GalacticServicePathEscaper.ps1

Mission: Check and Clean up services with unquoted file paths

Switch to the Fountain App