---
id: 8699
title: "Windows Exploitation Tricks: Exploiting Arbitrary Object Directory Creation for Local Elevation of Privilege"
source_domain: projectzero.google
source_url: "https://projectzero.google/2018/08/windows-exploitation-tricks-exploiting.html"
published_at: "2018-08-14T00:00:00Z"
tags: ["windows", "exploitation", "project-zero", "object-directory"]
phying_url: "https://phying.com/item/8699"
lang: en
---

# Windows Exploitation Tricks: Exploiting Arbitrary Object Directory Creation for Local Elevation of Privilege

## Summary

And we’re back again for another blog in my series on Windows Exploitation tricks. This time I’ll detail how I was able to exploit Issue 1550 which results in an arbitrary object directory being created by using a useful behavior of the CSRSS privileged process. Once again by detailing how I’d exploit a particular vulnerability I hope that readers get a better understanding of the complexity of the Windows operating system as well as giving Microsoft information on non-memory corruption exploitation techniques so that they can mitigate them in some way.

## Intelligence Metadata

- **Sources:** projectzero.google
- **Published:** 2018-08-14T00:00:00Z
- **Original:** https://projectzero.google/2018/08/windows-exploitation-tricks-exploiting.html
- **Phying News:** https://phying.com/item/8699