Connectify Hotspot 2018 ‘ConnectifyService’ – Unquoted Service Path

Exploit Database
81 阅读

作者： SamAlucard

日期： 2022-02-18
类别：
- local
平台：
- windows
来源：https://www.exploit-db.com/exploits/50764/

#Exploit Title: Connectify Hotspot 2018 'ConnectifyService' - Unquoted Service Path
#Exploit Author : SamAlucard
#Exploit Date: 2022-02-17
#Vendor : Connectify Inc
#Version : Connectify Hotspot 2018
#Vendor Homepage : https://www.connectify.me/
#Tested on OS: Windows 7 Pro

#Analyze PoC :
==============

C:\>sc qc Connectify
[SC] QueryServiceConfig CORRECTO

NOMBRE_SERVICIO: Connectify
TIPO : 10WIN32_OWN_PROCESS
TIPO_INICIO: 2 AUTO_START
CONTROL_ERROR: 1 NORMAL
NOMBRE_RUTA_BINARIO: C:\Program Files
(x86)\Connectify\ConnectifyService.exe
GRUPO_ORDEN_CARGA:
ETIQUETA : 0
NOMBRE_MOSTRAR : Connectify Hotspot 2018
DEPENDENCIAS : wlansvc
 : winmgmt
 : http
NOMBRE_INICIO_SERVICIO: LocalSystem

last Exploits
Connectify Hotspot 2018 ‘ConnectifyService’ – Unquoted Service Path的更多信息

Adrenalin Player 2.2.5.3 – ‘.m3u’ Local Buffer Overflow (SEH) (ASLR + DEP Bypass)：
Flash ActiveX 28.0.0.137 – Code Execution (1)：
ntpd 4.2.8p10 – Out-of-Bounds Read (PoC)：
Amanda 3.3.1 – Local Privilege Escalation：
Firefox 72 IonMonkey – JIT Type Confusion：
xglance-bin 11.00 – Privilege Escalation：
IBM AIX 5.3/6.1/7.1/7.2 – ‘lquerylv’ Local Privilege Escalation：
Ghostscript – ‘.PostScript’ File Stack Overflow：