UsoDllLoader

UsoDllLoader ⚠️ 2020-06-06 更新： 此技巧在最新的 Windows 10 Insider Preview 版本中已不再有效。这意味着，尽管它在 Windows 10 的主流版本上 仍然有效 ，但您应该预料到它在未来几个月内会被修补。 描述 此 PoC 展示了一种可用于在 Windows 上利用特权文件写入漏洞的技术。它提供了 James Forshaw（又名 @tiraniddo）发现的 DiagHub DLL 加载“漏洞”的替代方案，该漏洞自 1903 版本起已被微软修复。 TL;DR 从 Windows 10 开始，微软引入了 Update Session...

The vulnerability of the Windows USO Core Worker component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows USO Core Worker component of the Windows operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker to enhance their privileges...

UsoDllLoader - Windows - Weaponizing Privileged File Writes With The Update Session Orchestrator Service

2020-06-06 Update: this trick no longer works on the latest builds of Windows 10 Insider Preview. This means that, although it still works on the mainstream version ofWindows 10, you should expect it to be patched in the coming months. Description This PoC shows a technique that can be used to...

Background Intelligent Transfer Service Privilege Escalation Exploit

This Metasploit module exploits CVE-2020-0787, an arbitrary file move vulnerability in outdated versions of the Background Intelligent Transfer Service BITS, to overwrite C:\Windows\System32\WindowsCoreDeviceInfo.dll with a malicious DLL containing the attacker's payload. To achieve code executio...

Unspecified Vulnerability in F5 SSL Orchestrator

F5 SSL Orchestrator is an all-in-one appliance solution for SSL infrastructures from F5, Inc. that provides policy-based dynamic decryption, encryption and traffic control. A security vulnerability exists in F5 SSL Orchestrator versions 15.0.0 through 15.0.1 and 14.0.0 through 14.1.2, which can b...