ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-19 10:56:10 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix typo in MSI installer

Browse Source
This commit is contained in:
Swissky 2023-10-11 21:05:54 +02:00
parent 5556f6ff79
commit e86f221fe8
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Methodology and Resources/Windows - Privilege Escalation.md
View File

@ -898,7 +898,7 @@ Common mistakes in MSI installers:
* Missing quiet parameters: it will spawn `conhost.exe` as `NT SYSTEM`. Use `[CTRL]+[A]` to select some text in it, it will pause the execution. * Missing quiet parameters: it will spawn `conhost.exe` as `NT SYSTEM`. Use `[CTRL]+[A]` to select some text in it, it will pause the execution.
* conhost -> properties -> "legacy console mode" Link -> Internet Explorer -> CTRL+O –> cmd.exe * conhost -> properties -> "legacy console mode" Link -> Internet Explorer -> CTRL+O –> cmd.exe
* GUI with direct actions: Ooa URL and start the browser then use the same scenario. * GUI with direct actions: open a URL and start the browser then use the same scenario.
* Binaries/Scripts loaded from user writable paths: you might need to win the race condition. * Binaries/Scripts loaded from user writable paths: you might need to win the race condition.
* DLL hijacking/search order abusing * DLL hijacking/search order abusing
* PowerShell `-NoProfile` missing: Add custom commands into your profile * PowerShell `-NoProfile` missing: Add custom commands into your profile