Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

Windows Local Privilege Escalation via StorSvc service (writable SYSTEM path DLL search order Hijacking) /cc Antón Ortigueira Kurosh Dabbagh ➡️

BlackArrowSec's profile picture

BlackArrow

1,780 subscribers

60,745 görüntüleme • 3 yıl önce •via X (Twitter)

Bilim & TeknolojiHaberler & PolitikaEğitim
LIVE

Anya Rossi• Live Now

Private livecam show

2 Yorum

Denis Skvortcov profil fotoğrafı
Denis Skvortcov3 yıl önce

@Ivanlef0u @antuache @_Kudaes_ Haven’t seen LPE here. It’s DLL hijacking that can be used as an exploitation trick when you have an arbitrarily file write primitive in the SYSTEM context

ƘȺƞfrƹ profil fotoğrafı
ƘȺƞfrƹ3 yıl önce

@antuache @_Kudaes_ Great alternative to WptsExtensions.dll which is more detected nowadays, well done !

Benzer Videolar

I just released the exploit and technical analysis of my CVE-2023-36424 - Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation. Happy Reading. #exploit #cybersecurity #news
0:33

I just released the exploit and technical analysis of my CVE-2023-36424 - Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation. Happy Reading. #exploit #cybersecurity #news

Pikala

45,657 görüntüleme • 2 yıl önce

PRIVILEGE ESCALATION USING SUDO COMMAND IN LINUX NOTE: THIS WAS CARRIED OUT IN A LIVE LINUX SYSTEM WITHOUT NO PASSWORD
1:31

PRIVILEGE ESCALATION USING SUDO COMMAND IN LINUX NOTE: THIS WAS CARRIED OUT IN A LIVE LINUX SYSTEM WITHOUT NO PASSWORD

H4RUK7 KIRA 🇯🇵🇨🇵

191,536 görüntüleme • 6 ay önce

Privilege escalation using Linux capabilities
0:29

Privilege escalation using Linux capabilities

Abdulkadir | Cybersecurity

25,907 görüntüleme • 5 ay önce

🔥 Microsoft fixed CVE-2025-47955, discovered by our researcher Sergey Bliznyuk! This vulnerability allows a locally authenticated attacker to elevate privileges to SYSTEM via the Windows RasMan service. 🔗 Advisory:
0:24

🔥 Microsoft fixed CVE-2025-47955, discovered by our researcher Sergey Bliznyuk! This vulnerability allows a locally authenticated attacker to elevate privileges to SYSTEM via the Windows RasMan service. 🔗 Advisory:

PT SWARM

13,345 görüntüleme • 1 yıl önce

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root
0:22

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root

Dark Web Informer

18,534 görüntüleme • 2 ay önce

Fancy a macOS 0day local privilege escalation for GOG Galaxy? Although reported almost a year ago, there is still no patch. Full details for the vulnerability:
0:27

Fancy a macOS 0day local privilege escalation for GOG Galaxy? Although reported almost a year ago, there is still no patch. Full details for the vulnerability:

Rio

43,768 görüntüleme • 2 yıl önce

So here is new local privilege escalation zero-day I discovered, not patched yet too :). In simple terms, if you have a service like RDP that exposes an RPC server, there many system services running as SYSTEM connect to it as RPC clients. If that service is turned off (RDP is off by default), it seems that any other process in Windows can expose the same RPC server using the same endpoint. Now all the RPC calls from that SYSTEM processes will come to this fake server and If the process that deployed the server has SeImpersonatePrivilege, it can escalate to SYSTEM by impersonate the RPC client. In the white paper below, I describe five exploit paths you can abuse. However it's architecture problem and maybe there are more. It's Not A Potato
1:49

So here is new local privilege escalation zero-day I discovered, not patched yet too :). In simple terms, if you have a service like RDP that exposes an RPC server, there many system services running as SYSTEM connect to it as RPC clients. If that service is turned off (RDP is off by default), it seems that any other process in Windows can expose the same RPC server using the same endpoint. Now all the RPC calls from that SYSTEM processes will come to this fake server and If the process that deployed the server has SeImpersonatePrivilege, it can escalate to SYSTEM by impersonate the RPC client. In the white paper below, I describe five exploit paths you can abuse. However it's architecture problem and maybe there are more. It's Not A Potato

Haidar

51,048 görüntüleme • 2 ay önce

🚨 New advisory was just published! 🚨 An out-of-bounds write vulnerability in the Linux kernel achieves local privilege escalation on Ubuntu 22.04 for active user sessions:
2:06

🚨 New advisory was just published! 🚨 An out-of-bounds write vulnerability in the Linux kernel achieves local privilege escalation on Ubuntu 22.04 for active user sessions:

SSD Secure Disclosure

174,881 görüntüleme • 1 yıl önce

🚨CVE-2025-8088 PoC: WinRAR for Windows path traversal allows arbitrary code execution via crafted archives GitHub PoC: Video Credit: Advisory: CVSS: 8.4
0:45

🚨CVE-2025-8088 PoC: WinRAR for Windows path traversal allows arbitrary code execution via crafted archives GitHub PoC: Video Credit: Advisory: CVSS: 8.4

Dark Web Informer

24,628 görüntüleme • 8 ay önce

Privilege Escalation – The full explanation is available on my Telegram channel.
1:43

Privilege Escalation – The full explanation is available on my Telegram channel.

./Mr-Dark

17,246 görüntüleme • 1 yıl önce

New windows operating system
0:22

New windows operating system

Matty McTech

25,797 görüntüleme • 5 ay önce

“DUTERTE ICC ARREST”: A HISTORIC WIN FOR JUSTICE & RULES-BASED ORDER via BBC World Service
2:22

“DUTERTE ICC ARREST”: A HISTORIC WIN FOR JUSTICE & RULES-BASED ORDER via BBC World Service

Richard Heydarian

116,382 görüntüleme • 1 yıl önce

Windows 11 KILLS Local Accounts?
2:22

Windows 11 KILLS Local Accounts?

David Bombal

38,821 görüntüleme • 9 ay önce

Digging deeper into COM hijacking : The Key to COMpromise - Downloading a SYSTEM shell, Part 3 : Abusing a TOCTOU race to gain SYSTEM (Part 2) : Pwning AVs and EDRs by Hijacking COM Interfaces, (Part 1) : credits Neodyme
2:16

Digging deeper into COM hijacking : The Key to COMpromise - Downloading a SYSTEM shell, Part 3 : Abusing a TOCTOU race to gain SYSTEM (Part 2) : Pwning AVs and EDRs by Hijacking COM Interfaces, (Part 1) : credits Neodyme

Binni Shah

10,875 görüntüleme • 1 yıl önce

Hijacking and kidnapping. Anyone with info, call SA Police Service 🇿🇦 on 08600 10111.
1:12

Hijacking and kidnapping. Anyone with info, call SA Police Service 🇿🇦 on 08600 10111.

Yusuf Abramjee

761,897 görüntüleme • 5 ay önce

‼️ CVE-2026-32223: Windows USB Printing Stack (usbprint.sys) Elevation of Privilege Vulnerability
0:56

‼️ CVE-2026-32223: Windows USB Printing Stack (usbprint.sys) Elevation of Privilege Vulnerability

Dark Web Informer

32,474 görüntüleme • 2 ay önce

updated my car ai in order to give better local avoidance. the green / red whiskers allow the cars to detect local obstacles while trying their best to still follow their path #gamdev #indiedev
0:31

updated my car ai in order to give better local avoidance. the green / red whiskers allow the cars to detect local obstacles while trying their best to still follow their path #gamdev #indiedev

BigguyDev

48,523 görüntüleme • 11 ay önce

Emocionante! A Escola de Gaitas de Ortigueira interpreta o himno galego e ízanse as bandeiras das nacións celtas para inaugurar o Festival de Ortigueira 2025 🌀❤️
2:48

Emocionante! A Escola de Gaitas de Ortigueira interpreta o himno galego e ízanse as bandeiras das nacións celtas para inaugurar o Festival de Ortigueira 2025 🌀❤️

Guido Guía

12,275 görüntüleme • 1 yıl önce