Showing 1 - 2 of 2

Files from r00t-3xp10it

First Active	2016-10-27
Last Active	2017-01-09

Enigma Fileless UAC Bypass: Posted Jan 9, 2017; Authored by r00t-3xp10it, mattifestation, enigma0x3 | Site metasploit.com; This Metasploit module is an implementation of fileless uac bypass using cmd.exe instead of powershell.exe (OJ msf module). This module will create the required registry entry in the current user's hive, set the default value to whatever you pass via the EXEC_COMMAND parameter, and runs eventvwr.exe (hijacking the process being started to gain code execution).; tags | exploit, registry, code execution; SHA-256 | 71a3e1287baa3b08f46554d9f2e3a7bd801f903a60a53f43baedfb3420e5dc82; Download | Favorite | View

Microsoft Wsearch Privilege Escalation: Posted Oct 27, 2016; Authored by r00t-3xp10it | Site metasploit.com; This post-exploitation Metasploit module requires a meterpreter session to be able to upload/inject our SearchIndexer.exe into WSearch (windows search) service. The WSearch service uses one executable.exe set in binary_path_name and runs it has local/system at startup, this enables local privilege_escalation/persistence_backdooring. To exploit this vulnerability a local attacker needs to inject/replace the executable file into the binary_path_name of the service. Rebooting the system or restarting the service will run the malicious executable with elevated privileges.; tags | exploit, local; systems | windows; SHA-256 | 147b40da2927d654ea96757dd433f77c12069174180fca4cf82bcd19c6113ae3; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days