Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Windows Exploitation Tricks: Arbitrary Directory Creation to Arbitrary File Read

projectzero.google | blog | #privilege-escalation | #windows | #exploitation | #project-zero | #file-read | #directory-creation

Summary

A Project Zero post in the Windows exploitation tricks series, showing how an arbitrary directory creation primitive can be escalated into arbitrary file read.
Published
Collected

original ↗

Related coverage

blog · projectzero.google
Dude, where’s my heap?
A Google Project Zero post examining heap spraying and heap address randomization, and how browser exploits can still succeed against them.
blog · projectzero.google
In-Console-Able
A Google Project Zero post describing a Windows security bug that weakens sandbox-style restrictions and could aid sandbox escape research.
blog · projectzero.google
Exploiting the DRAM rowhammer bug to gain kernel privileges
A Google Project Zero write-up demonstrating how the DRAM rowhammer hardware flaw can be exploited from an unprivileged process to gain kernel privileges.
vulnerability · projectzero.google
Internet Explorer EPM Sandbox Escape CVE-2014-6350
A Google Project Zero post detailing exploitation of CVE-2014-6350 to escape Internet Explorer's Enhanced Protected Mode sandbox.
blog · projectzero.google
Windows Exploitation Tricks: Exploiting Arbitrary File Writes for Local Elevation of Privilege
A Project Zero post explains how arbitrary file write bugs on Windows can be turned into local privilege escalation, walking through practical exploitation techniques for this bug class.
blog · projectzero.google
Exploiting a Leaked Thread Handle
A bug in the Windows Secondary Logon service, fixed as MS16-032, leaks a fully accessible thread handle from a privileged process, enabling privilege escalation without memory corruption.
back