+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Pentesting and Forensics (https://hackforums.net/forumdisplay.php?fid=231)
+---- Thread: 0-day RID-Hijack. Persistent Windows Access by editing registery. Tutorial included (/showthread.php?tid=5896805)
0-day RID-Hijack. Persistent Windows Access by editing registery. Tutorial included - Eilif - Oct 19, 2018
You need access before you can setup extra/hidden accounts with this hijack. You can promote low level accounts to admins.
https://csl.com.co/rid-hijacking/
https://csl.com.co/wp-content/uploads/2018/10/RID-HIJACKING-conference-material.pdf
https://www.youtube.com/watch?v=9qPGuZoJxIc
https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/manage/rid_hijack.rb
Still unfixed as of today.
Enjoy
RE: 0-day RID-Hijack. Persistent Windows Access by editing registery. Tutorial included - CyberStrike - Oct 19, 2018
Good find very interesting.
RE: 0-day RID-Hijack. Persistent Windows Access by editing registery. Tutorial included - hempuk - Oct 19, 2018
Im going to have fun playing with this at the weekend nice find mate ...