Recent privilege escalation exploits for Windows 8.1 64 bits (2016-2018)









up vote
-2
down vote

favorite












My question is more specific. I have a reverse Shell in a Windows 8.1 64-bits machine. Is there an exploit which escalates privileges in the same Shell, without creating a new window? I mean, in a similar way that the MS11-046 worked, where the SYSTEM shell spawns within the invoking shell/process.



Is there any exploit which already does this? I am trying to update the CVE 2017-0213 code without success, i am still fighting with Visual Studio 2017. Also, if you know of other exploit which could be updated to spawn the SYSTEM Shell in the already existing Shell, i would give you the 5 starts too.






windows exploit







share|improve this question





















  • If anyone was wondering, MS17-017 Works that way. Thank you for the downvote ;)
    – ri ru
    Nov 11 at 13:58














up vote
-2
down vote

favorite












My question is more specific. I have a reverse Shell in a Windows 8.1 64-bits machine. Is there an exploit which escalates privileges in the same Shell, without creating a new window? I mean, in a similar way that the MS11-046 worked, where the SYSTEM shell spawns within the invoking shell/process.



Is there any exploit which already does this? I am trying to update the CVE 2017-0213 code without success, i am still fighting with Visual Studio 2017. Also, if you know of other exploit which could be updated to spawn the SYSTEM Shell in the already existing Shell, i would give you the 5 starts too.






windows exploit







share|improve this question





















  • If anyone was wondering, MS17-017 Works that way. Thank you for the downvote ;)
    – ri ru
    Nov 11 at 13:58












up vote
-2
down vote

favorite









up vote
-2
down vote

favorite











My question is more specific. I have a reverse Shell in a Windows 8.1 64-bits machine. Is there an exploit which escalates privileges in the same Shell, without creating a new window? I mean, in a similar way that the MS11-046 worked, where the SYSTEM shell spawns within the invoking shell/process.



Is there any exploit which already does this? I am trying to update the CVE 2017-0213 code without success, i am still fighting with Visual Studio 2017. Also, if you know of other exploit which could be updated to spawn the SYSTEM Shell in the already existing Shell, i would give you the 5 starts too.






windows exploit







share|improve this question













My question is more specific. I have a reverse Shell in a Windows 8.1 64-bits machine. Is there an exploit which escalates privileges in the same Shell, without creating a new window? I mean, in a similar way that the MS11-046 worked, where the SYSTEM shell spawns within the invoking shell/process.



Is there any exploit which already does this? I am trying to update the CVE 2017-0213 code without success, i am still fighting with Visual Studio 2017. Also, if you know of other exploit which could be updated to spawn the SYSTEM Shell in the already existing Shell, i would give you the 5 starts too.






windows exploit




windows exploit






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Nov 10 at 23:17









ri ru

21




21











  • If anyone was wondering, MS17-017 Works that way. Thank you for the downvote ;)
    – ri ru
    Nov 11 at 13:58
















  • If anyone was wondering, MS17-017 Works that way. Thank you for the downvote ;)
    – ri ru
    Nov 11 at 13:58















If anyone was wondering, MS17-017 Works that way. Thank you for the downvote ;)
– ri ru
Nov 11 at 13:58




If anyone was wondering, MS17-017 Works that way. Thank you for the downvote ;)
– ri ru
Nov 11 at 13:58

















active

oldest

votes











Your Answer






StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");

StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);













 

draft saved


draft discarded


















StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53244360%2frecent-privilege-escalation-exploits-for-windows-8-1-64-bits-2016-2018%23new-answer', 'question_page');

);

Post as a guest















Required, but never shown






























active

oldest

votes













active

oldest

votes









active

oldest

votes






active

oldest

votes















 

draft saved


draft discarded















































 


draft saved


draft discarded














StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53244360%2frecent-privilege-escalation-exploits-for-windows-8-1-64-bits-2016-2018%23new-answer', 'question_page');

);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







-

這個網誌中的熱門文章

How to read a connectionString WITH PROVIDER in .NET Core?

圖片
6 I added .AddJsonFile("Connections.json", optional: true, reloadOnChange: true) in public Startup(IHostingEnvironment env) Connections.json contains: "ConnectionStrings": "DefaultConnection": "Server=(localdb)\mssqllocaldb;Database=DATABASE;Trusted_Connection=True;MultipleActiveResultSets=true", "COR-W81-101": "Data Source=DATASOURCE;Initial Catalog=P61_CAFM_Basic;User Id=USERID;Password=PASSWORD;Persist Security Info=False;MultipleActiveResultSets=False;Packet Size=4096;", "COR-W81-100": "Data Source=DATASOURCE;Initial Catalog=Post_PS;User Id=USERID;Password=PASSWORD;Persist Security Info=False;MultipleActiveResultSets=False;Packet Size=4096;", "MSEDGEWIN10": "Data Source=DATASOURCE; Initial Catalog=COR_Basic; Persist Security Info=False;Integrated Security=true;MultipleActiveResultSets=False;Packet Size=4096;Application Name="COR_Basic"", "server&qu
閱讀完整內容

In R, how to develop a multiplot heatmap.2 figure showing key labels successfully

圖片
1 2 I'm trying to develop a multiplot heatmap.2 saved to a pdf. I'm having some success but the axis labels are getting chopped off. Subplot titles are also desirable but again the labels are getting chopped. Here's my reproducible code: library(gridExtra) library(grid) library(gridGraphics) library(gplots) Col = colorRampPalette(c("red","orange","yellow", "white")) grab_grob <- function() grid.echo() grid.grab() par(cex.main=0.1, mar = c(1,1,1,1) ) #data<-read.table("heatmap.input.matrix.data.txt") lmat = rbind(c(2,3),c(4,1),c(4,1)) lwid = c(2.5,4) lhei = c(0.5,4,3) labRowvec <- c(rep(NULL, dim(matrix(runif(1000, 1,10),ncol=50))[1])) labColvec <- c(rep(NULL, dim(matrix(runif(1000, 1,10),ncol=50))[2])) gl <- lapply(1:12, function(i) heatmap.2(matrix(runif(1000, 1,10),ncol=50), dendrogram = "none",offsetRow=-0.5, offsetCol=-1,srtCol=0, density="density", lmat =lmat,lhei = l
閱讀完整內容

Museum of Modern and Contemporary Art of Trento and Rovereto

圖片
Art museum in Rovereto TN, Italy Museum of Modern and Contemporary Art of Trento and Rovereto Museo d'arte moderna e contemporanea di Trento e Rovereto MART, Entrance Location Corso Angelo Bettini, 43, 38068 Rovereto TN, Italy Coordinates 45°53′38″N 11°02′42″E  /  45.8940°N 11.0450°E  / 45.8940; 11.0450 Coordinates: 45°53′38″N 11°02′42″E  /  45.8940°N 11.0450°E  / 45.8940; 11.0450 Type Art museum Director Gianfranco Maraniello Public transit access Trento train station. Taxis outside station. Website mart.trento.it The Museum of Modern and Contemporary Art of Trento and Rovereto (MART) ( Museo d'Arte Moderna e Contemporanea di Trento e Rovereto , in Italian) is a museum centre in the Italian province of Trento. The main site is in Rovereto, and contains mostly modern and contemporary artworks, including works from renowned Giorgio Morandi, Giorgio de Chirico, Felice Casorati, Carlo Carrà and Fortunato Depero. Fortunato Depero's house in Rovereto (known as Casa d
閱讀完整內容