Showing 1 - 2 of 2

Files from Emin Ghuliev

Windscribe WindscribeService Named Pipe Privilege Escalation: Posted Feb 5, 2020; Authored by Brendan Coles, Emin Ghuliev | Site metasploit.com; The Windscribe VPN client application for Windows makes use of a Windows service WindscribeService.exe which exposes a named pipe \\.\pipe\WindscribeService allowing execution of programs with elevated privileges. Windscribe versions prior to 1.82 do not validate user-supplied program names, allowing execution of arbitrary commands as SYSTEM. This Metasploit module has been tested successfully on Windscribe versions 1.80 and 1.81 on Windows 7 SP1 (x64).; tags | exploit, arbitrary; systems | windows; advisories | CVE-2018-11479; SHA-256 | 7f200c24f141392d23225b9330afb247d5a945ace30e10996f31e175ed2e9dc9; Download | Favorite | View

Windscribe 1.81 Code Execution: Posted May 25, 2018; Authored by Emin Ghuliev; The VPN component in Windscribe 1.81 uses the OpenVPN client for connections. Also, it creates a WindScribeService.exe system process that establishes a \\.\pipe\WindscribeService named pipe endpoint that allows the Windscribe VPN process to connect and execute an OpenVPN process or other processes (like taskkill, etc.). There is no validation of the program name before constructing the lpCommandLine argument for a CreateProcess call. An attacker can run any malicious process with SYSTEM privileges through this named pipe.; tags | exploit; SHA-256 | bf2758f710f5c4fe5241aa4cde9fdd9079abc1121a02d1ab0b1722bc127d65f2; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days