Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

Windows Local Privilege Escalation via StorSvc service (writable SYSTEM path DLL search order Hijacking) /cc Antón Ortigueira Kurosh Dabbagh ➡️

BlackArrowSec's profile picture

BlackArrow

1,780 subscribers

60,745 Aufrufe • vor 3 Jahren •via X (Twitter)

Wissenschaft & TechnologieNachrichten & PolitikBildung
LIVE

Anya Rossi• Live Now

Private livecam show

2 Kommentare

Profilbild von Denis Skvortcov
Denis Skvortcovvor 3 Jahren

@Ivanlef0u @antuache @_Kudaes_ Haven’t seen LPE here. It’s DLL hijacking that can be used as an exploitation trick when you have an arbitrarily file write primitive in the SYSTEM context

Profilbild von ƘȺƞfrƹ
ƘȺƞfrƹvor 3 Jahren

@antuache @_Kudaes_ Great alternative to WptsExtensions.dll which is more detected nowadays, well done !

Ähnliche Videos

I just released the exploit and technical analysis of my CVE-2023-36424 - Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation. Happy Reading. #exploit #cybersecurity #news
0:33

I just released the exploit and technical analysis of my CVE-2023-36424 - Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation. Happy Reading. #exploit #cybersecurity #news

Pikala

45,647 Aufrufe • vor 2 Jahren

PRIVILEGE ESCALATION USING SUDO COMMAND IN LINUX NOTE: THIS WAS CARRIED OUT IN A LIVE LINUX SYSTEM WITHOUT NO PASSWORD
1:31

PRIVILEGE ESCALATION USING SUDO COMMAND IN LINUX NOTE: THIS WAS CARRIED OUT IN A LIVE LINUX SYSTEM WITHOUT NO PASSWORD

H4RUK7 KIRA 🇯🇵🇨🇵

191,536 Aufrufe • vor 5 Monaten

Privilege escalation using Linux capabilities
0:29

Privilege escalation using Linux capabilities

Abdulkadir | Cybersecurity

25,188 Aufrufe • vor 4 Monaten

🔥 Microsoft fixed CVE-2025-47955, discovered by our researcher Sergey Bliznyuk! This vulnerability allows a locally authenticated attacker to elevate privileges to SYSTEM via the Windows RasMan service. 🔗 Advisory:
0:24

🔥 Microsoft fixed CVE-2025-47955, discovered by our researcher Sergey Bliznyuk! This vulnerability allows a locally authenticated attacker to elevate privileges to SYSTEM via the Windows RasMan service. 🔗 Advisory:

PT SWARM

13,345 Aufrufe • vor 1 Jahr

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root
0:22

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root

Dark Web Informer

18,534 Aufrufe • vor 1 Monat

Fancy a macOS 0day local privilege escalation for GOG Galaxy? Although reported almost a year ago, there is still no patch. Full details for the vulnerability:
0:27

Fancy a macOS 0day local privilege escalation for GOG Galaxy? Although reported almost a year ago, there is still no patch. Full details for the vulnerability:

Rio

43,753 Aufrufe • vor 2 Jahren

So here is new local privilege escalation zero-day I discovered, not patched yet too :). In simple terms, if you have a service like RDP that exposes an RPC server, there many system services running as SYSTEM connect to it as RPC clients. If that service is turned off (RDP is off by default), it seems that any other process in Windows can expose the same RPC server using the same endpoint. Now all the RPC calls from that SYSTEM processes will come to this fake server and If the process that deployed the server has SeImpersonatePrivilege, it can escalate to SYSTEM by impersonate the RPC client. In the white paper below, I describe five exploit paths you can abuse. However it's architecture problem and maybe there are more. It's Not A Potato
1:49

So here is new local privilege escalation zero-day I discovered, not patched yet too :). In simple terms, if you have a service like RDP that exposes an RPC server, there many system services running as SYSTEM connect to it as RPC clients. If that service is turned off (RDP is off by default), it seems that any other process in Windows can expose the same RPC server using the same endpoint. Now all the RPC calls from that SYSTEM processes will come to this fake server and If the process that deployed the server has SeImpersonatePrivilege, it can escalate to SYSTEM by impersonate the RPC client. In the white paper below, I describe five exploit paths you can abuse. However it's architecture problem and maybe there are more. It's Not A Potato

Haidar

50,555 Aufrufe • vor 1 Monat

🚨 New advisory was just published! 🚨 An out-of-bounds write vulnerability in the Linux kernel achieves local privilege escalation on Ubuntu 22.04 for active user sessions:
2:06

🚨 New advisory was just published! 🚨 An out-of-bounds write vulnerability in the Linux kernel achieves local privilege escalation on Ubuntu 22.04 for active user sessions:

SSD Secure Disclosure

174,881 Aufrufe • vor 1 Jahr

Privilege Escalation – The full explanation is available on my Telegram channel.
1:43

Privilege Escalation – The full explanation is available on my Telegram channel.

./Mr-Dark

17,246 Aufrufe • vor 1 Jahr

🚨CVE-2025-8088 PoC: WinRAR for Windows path traversal allows arbitrary code execution via crafted archives GitHub PoC: Video Credit: Advisory: CVSS: 8.4
0:45

🚨CVE-2025-8088 PoC: WinRAR for Windows path traversal allows arbitrary code execution via crafted archives GitHub PoC: Video Credit: Advisory: CVSS: 8.4

Dark Web Informer

24,628 Aufrufe • vor 7 Monaten

New windows operating system
0:22

New windows operating system

Matty McTech

25,797 Aufrufe • vor 4 Monaten

“DUTERTE ICC ARREST”: A HISTORIC WIN FOR JUSTICE & RULES-BASED ORDER via BBC World Service
2:22

“DUTERTE ICC ARREST”: A HISTORIC WIN FOR JUSTICE & RULES-BASED ORDER via BBC World Service

Richard Heydarian

116,320 Aufrufe • vor 1 Jahr

🟡 Today's video is about an 🇮🇷 air-defense system which may soon see action due to regional escalation: ➡️ The new Arman all-on-one-vehicle air- & missile defense system ➡️ Maybe 🇮🇷's only operational missile-defense system beside the S-300 Watch: ⬇️
0:59

🟡 Today's video is about an 🇮🇷 air-defense system which may soon see action due to regional escalation: ➡️ The new Arman all-on-one-vehicle air- & missile defense system ➡️ Maybe 🇮🇷's only operational missile-defense system beside the S-300 Watch: ⬇️

Patarames

74,596 Aufrufe • vor 1 Jahr

Windows 11 KILLS Local Accounts?
2:22

Windows 11 KILLS Local Accounts?

David Bombal

38,771 Aufrufe • vor 8 Monaten

Digging deeper into COM hijacking : The Key to COMpromise - Downloading a SYSTEM shell, Part 3 : Abusing a TOCTOU race to gain SYSTEM (Part 2) : Pwning AVs and EDRs by Hijacking COM Interfaces, (Part 1) : credits Neodyme
2:16

Digging deeper into COM hijacking : The Key to COMpromise - Downloading a SYSTEM shell, Part 3 : Abusing a TOCTOU race to gain SYSTEM (Part 2) : Pwning AVs and EDRs by Hijacking COM Interfaces, (Part 1) : credits Neodyme

Binni Shah

10,875 Aufrufe • vor 1 Jahr

Hijacking and kidnapping. Anyone with info, call SA Police Service 🇿🇦 on 08600 10111.
1:12

Hijacking and kidnapping. Anyone with info, call SA Police Service 🇿🇦 on 08600 10111.

Yusuf Abramjee

761,729 Aufrufe • vor 4 Monaten

‼️ CVE-2026-32223: Windows USB Printing Stack (usbprint.sys) Elevation of Privilege Vulnerability
0:56

‼️ CVE-2026-32223: Windows USB Printing Stack (usbprint.sys) Elevation of Privilege Vulnerability

Dark Web Informer

32,252 Aufrufe • vor 1 Monat

Emocionante! A Escola de Gaitas de Ortigueira interpreta o himno galego e ízanse as bandeiras das nacións celtas para inaugurar o Festival de Ortigueira 2025 🌀❤️
2:48

Emocionante! A Escola de Gaitas de Ortigueira interpreta o himno galego e ízanse as bandeiras das nacións celtas para inaugurar o Festival de Ortigueira 2025 🌀❤️

Guido Guía

12,275 Aufrufe • vor 11 Monaten

updated my car ai in order to give better local avoidance. the green / red whiskers allow the cars to detect local obstacles while trying their best to still follow their path #gamdev #indiedev
0:31

updated my car ai in order to give better local avoidance. the green / red whiskers allow the cars to detect local obstacles while trying their best to still follow their path #gamdev #indiedev

BigguyDev

48,523 Aufrufe • vor 10 Monaten