symboliclink-testing-tools

symboliclink-testing-tools c Google Inc. 2015 개발: James Forshaw 이 도구 모음은 Windows의 다양한 심볼릭 링크 유형을 테스트하기 위한 작은 도구 모음입니다. 다음 도구들로 구성되어 있습니다: BaitAndSwitch : 심볼릭 링크를 만들고 OPLOCK을 사용하여 TOCTOU에서 승리합니다. CreateDosDeviceSymlink: csrss를 사용하여 개체 관리자 심볼릭 링크를 만듭니다. CreateMountPoint: 임의의 파일 마운트 지점을 만듭니다...

CVE-2026-23745: Improper Limitation of a Pathname to a Restricted Directory

node-tar is a Tar for Node.js. The node-tar library = 7.5.2 fails to sanitize the linkpath of Link hardlink and SymbolicLink entries when preservePaths is false the default secure behavior. This allows malicious archives to bypass the extraction root restriction, leading to Arbitrary File Overwri...

Keybase: Privilege Escalation through Keybase Installer via Helper

Keybase.app is bundled with the components installer named KeybaseInstaller.app. When --install-app-bundle --source-path --app-path is given to installer, KBAppBundle.m checks if is properly codesigned, then copies it to . First, there's two vulnerabilities in the source path validation: the chec...

Windows 8.1 - DCOM DCE/RPC Local NTLM Reflection Privilege Escalation (MS15-076) Exploit

Exploit for windows platform in category local exploits Source: https://github.com/monoxgas/Trebuchet Trebuchet MS15-076 CVE-2015-2370 Privilege Escalation Copies a file to any privileged location on disk Compiled with VS2015, precompiled exe in Binary directory Usage: trebuchet.exe...

Microsoft Windows 8.1 - DCOM DCERPC Local NTLM Reflection Privilege Escalation (MS15-076)

Microsoft Windows 8.1 - DCOM DCERPC Local NTLM Reflection Privilege Escalation MS15-076 Source: https://github.com/monoxgas/Trebuchet Trebuchet MS15-076 CVE-2015-2370 Privilege Escalation Copies a file to any privileged location on disk Compiled with VS2015, precompiled exe in Binary directory...