Video wird geladen...
Video konnte nicht geladen werden
#HuntingTipOfTheDay: folders with trailing spaces can be created on Windows, and they cause trouble: 🔴 Hard to delete/rename 🟠 Can hide files when same folder w/o trailing space exists 🟡 May enable UAC bypass(see next tweet) 🔍 Hunt for paths with trailing spaces - highly sus
11,433 Aufrufe • vor 1 Jahr •via X (Twitter)
2 Kommentare

Wietzevor 1 Jahr
UAC bypass can be achieved by eg moving the legit perfmon.exe and an evil atl.dll to "c:\windows \system32". Windows is tricked into thinking it's a safe/trusted directory, meaning perfmon will launch with high integrity and also loads your DLL. Several other EXEs are vulnerable!

ljtronvor 1 Jahr
Interesting my dad always hounded me for using spaces in files and folders but I never knew why.
