Microsoft Windows CSRSS Privilege Escalation

Discussion in 'News Aggregator' started by Packet Storm, 28 Apr 2016.

  1. Packet Storm

    Packet Storm Guest

    The CSRSS BaseSrv RPC call BaseSrvCheckVDM allows you to create a new process with the anonymous token, which results on a new process in session 0 which can be abused to elevate privileges.

    Continue reading...
     
    #1 Packet Storm, 28 Apr 2016
(You must log in or sign up to post here.)

Share This Page

Loading...