Microsoft Windows RegLoadAppKey Privilege Elevation
Posted by deepcore on September 24, 2016 – 5:13 pm
RegLoadAppKey is documented to load keys in a location which can’t be enumerated and also non-guessable. However it’s possible to enumerate loaded hives and find ones which can be written to which might lead to elevation of privilege.
Post a reply
You must be logged in to post a comment.