Intelligence View
⚡ tsecurity.de Intelligence
Windows NtLoadKeyEx Read Only Hive Arbitrary File Write Privilege Escalation
NtLoadKeyEx takes a flag to open a registry hive read only, if one of the hive files cannot be opened for read access it will revert to write mode and also impersonate the calling process. This can leading to elevation of privilege if a…
Reagiere als Erste:r — dein Feedback zählt!
NtLoadKeyEx takes a flag to open a registry hive read only, if one of the hive files cannot be opened for read access it will revert to write mode and also impersonate the calling process. This can leading to elevation of privilege if a user controlled hive is opened in a system service.
SOCIAL SHARE CARD GENERATOR