Windows Local Privilege Escalation via StorSvc service (writable SYSTEM path DLL search order Hijacking) /cc Antón Ortigueira Kurosh Dabbagh ➡️

@Ivanlef0u @antuache @_Kudaes_ Haven’t seen LPE here. It’s DLL hijacking that can be used as an exploitation trick when you have an arbitrarily file write primitive in the SYSTEM context

@antuache @_Kudaes_ Great alternative to WptsExtensions.dll which is more detected nowadays, well done !