> For the complete documentation index, see [llms.txt](https://red.infiltr8.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://red.infiltr8.io/redteam/privilege-escalation/windows/services.md).

# Insecure Services

## Theory

One of the basic features of Microsoft Windows is the ability to run services. These are background processes, similar to Unix deamons. They are managed by the [Service Control Manager](https://learn.microsoft.com/en-us/windows/win32/services/service-control-manager). If they are misconfigured, as they usually run as a local system account, they can lead to privilege escalation.

## Practice

### Enumerate

{% content-ref url="/pages/MVREys7HJHUfzFtEbROm" %}
[Processes & Services](/redteam/discovery/windows/processes-and-services.md)
{% endcontent-ref %}

### Exploit

{% content-ref url="/pages/w2MynVqegWVN7AWC2P0U" %}
[Weak Service Permissions](/redteam/privilege-escalation/windows/services/weak-service-permissions.md)
{% endcontent-ref %}

{% content-ref url="/pages/Lh3oJZNgPTDfxODCTEyO" %}
[Weak File/Folder Permissions](/redteam/privilege-escalation/windows/services/weak-files-permissions.md)
{% endcontent-ref %}

{% content-ref url="/pages/gVgEvnI3smFFofh7oL4B" %}
[Weak Registry Permissions](/redteam/privilege-escalation/windows/services/weak-registry-permissions.md)
{% endcontent-ref %}

{% content-ref url="/pages/X7FhjVNN8VwEB1gg4xZW" %}
[Unquoted Service Path](/redteam/privilege-escalation/windows/services/unquoted-service-path.md)
{% endcontent-ref %}