The NtLoadKeyEx system call allows an unprivileged user to load registry hives outside of the \Registry\A hidden attachment point which can be used to elevate privileges.
8d30ef721f9061806e06019063b62bba9b734dca044a593c1486cd66752e5a4c
© 2024 Packet Storm. All rights reserved.