Skip to content

Local privilege escalation on Windows by abusing CMSTP to bypass User Access Control (UAC)

License

Notifications You must be signed in to change notification settings

xerosic/leidenfrost

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 

Repository files navigation

leidenfrost

Local privilege escalation on Windows by abusing CMSTP to bypass User Access Control (UAC)

How it works

It abuses CMSTP (Connection Manager Profile installer) to run a malicious, user controlled, executable completly bypassing the UAC (User Access Control).

By dropping a crafted .ini file and then installing it using cmstp.exe the post-install executable will be launched at administrator privileges.

Credits

I did not discover this issue nor I take any credits for it.

About

Local privilege escalation on Windows by abusing CMSTP to bypass User Access Control (UAC)

Topics

Resources

License

Stars

Watchers

Forks

Languages