KMSpico 17.1.0.0 – ‘Service KMSELDI’ Unquoted Service Path

Exploit Database
85 阅读

作者： SamAlucard

日期： 2020-11-09
类别：
- local
平台：
- windows
来源：https://www.exploit-db.com/exploits/49003/

#Exploit Title: KMSpico 17.1.0.0 - 'Service KMSELDI' Unquoted Service Path
#Exploit Author : SamAlucard
#Exploit Date: 2020-11-08
#Vendor : KMSpico
#Version : Service_KMS 17.1.0.0
#Vendor Homepage :https://official-kmspico.com/
#Tested on OS: Windows 7 Pro

#Analyze PoC :
==============

C:\>sc qc "Service KMSELDI"
[SC] QueryServiceConfig CORRECTO

NOMBRE_SERVICIO: Service KMSELDI
TIPO : 10WIN32_OWN_PROCESS
TIPO_INICIO: 2 AUTO_START
CONTROL_ERROR: 1 NORMAL
NOMBRE_RUTA_BINARIO: C:\Program Files\KMSpico\Service_KMS.exe
GRUPO_ORDEN_CARGA:
ETIQUETA : 0
NOMBRE_MOSTRAR : Service KMSELDI
DEPENDENCIAS :
NOMBRE_INICIO_SERVICIO: LocalSystem

last Exploits
KMSpico 17.1.0.0 – ‘Service KMSELDI’ Unquoted Service Path的更多信息

Exploit – EPSON 1.124 – ‘seksmdb.exe’ Unquoted Service Path：
NTP – Local Privilege Escalation：
Microsoft Windows – UAC Protection Bypass (Via Slui File Handler Hijack) (PowerShell)：
Microsoft Windows Media Center 2002 – XML External Entity MotW Bypass：
Torrent 3GP Converter 1.51 – Stack Overflow (SEH)：
Acronis True Image OEM 19.0.5128 – ‘afcdpsrv’ Unquoted Service Path：
dataSIMS Avionics ARINC 664-1 – Local Buffer Overflow (PoC)：
Microsoft Windows – ‘WSReset’ UAC Protection Bypass (Registry)：