正在加载视频...
视频加载失败
#HuntingTipOfTheDay: folders with trailing spaces can be created on Windows, and they cause trouble: 🔴 Hard to delete/rename 🟠 Can hide files when same folder w/o trailing space exists 🟡 May enable UAC bypass(see next tweet) 🔍 Hunt for paths with trailing spaces - highly sus
11,433 次观看 • 1 年前 •via X (Twitter)
2 条评论

Wietze1 年前
UAC bypass can be achieved by eg moving the legit perfmon.exe and an evil atl.dll to "c:\windows \system32". Windows is tricked into thinking it's a safe/trusted directory, meaning perfmon will launch with high integrity and also loads your DLL. Several other EXEs are vulnerable!

ljtron1 年前
Interesting my dad always hounded me for using spaces in files and folders but I never knew why.
