BrokenPipe

BrokenPipe - Steam 客户端服务本地提权漏洞 PoC 视频：点击这里 John Hammond 制作的精彩小视频 点击这里 感谢 @MSNIGHTMARE2000 的灵感 - 请给他一份工作并给他发邮件！ 向 Tookie 、Hazetick 、belogen 和 bet3rd 致敬，你们是最棒的兄弟。 你还欠我一场 Overwatch 或 Starlight Princess 的游戏局 lusilly ，喵 :3 什么是 BrokenPipe？ BrokenPipe 演示了通过 Steam 客户端服务从标准 Windows 账户本地提权至 NT...

Valve: Arbitrary File Write as SYSTEM from unprivileged user

Note: This report was reviewed and updated after a correction to program scope. Vulnerability ======== The Steam Client installs a "Steam Client Service" that runs as SYSTEM to update the steam application. This service executes from C:\Program Files x86\Common\Steam where permissions are properl...