Web Hack List

Collected research

Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks

Zero Day Initiative — Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks

Turns weak Windows filesystem primitives, an arbitrary file or folder delete, move or rename, into full SYSTEM privilege escalation by seizing the Windows Installer rollback folder and planting forged rollback scripts. Also shows an arbitrary folder create that permanently stops the machine booting.

Record

Document
Zero Day Initiative — Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks
Researcher
Simon Zuckerbraun
Published by
Zero Day Initiative
Date
Format
Advisory
Topic
Other

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of Simon Zuckerbraun, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .