Loading video...
Video Failed to Load
#HuntingTipOfTheDay: folders with trailing spaces can be created on Windows, and they cause trouble: ๐ด Hard to delete/rename ๐ Can hide files when same folder w/o trailing space exists ๐ก May enable UAC bypass(see next tweet) ๐ Hunt for paths with trailing spaces - highly sus
11,433 views โข 1 year ago โขvia X (Twitter)
2 Comments

Wietze1 year ago
UAC bypass can be achieved by eg moving the legit perfmon.exe and an evil atl.dll to "c:\windows \system32". Windows is tricked into thinking it's a safe/trusted directory, meaning perfmon will launch with high integrity and also loads your DLL. Several other EXEs are vulnerable!

ljtron1 year ago
Interesting my dad always hounded me for using spaces in files and folders but I never knew why.
