Microsoft Windows NtLoadKeyEx User Hive Attachment Point Privilege Elevation
Posted by deepcore on September 24, 2016 – 5:13 pm
The NtLoadKeyEx system call allows an unprivileged user to load registry hives outside of the RegistryA hidden attachment point which can be used to elevate privileges.
Post a reply
You must be logged in to post a comment.