Whenever I have a chance I use my time diving into Windows internal binaries to uncover hidden functionality. This blogpost is dedicated to things I have discovered with the CMSTP.exe binary file. I found a UAC Bypass using sendkeys and a way to load DLL files from a Webdav server. I know the bypass I […]
I often end up in discussions where I point out that UAC bypass is a common thing and that UAC is not a very good security boundary if it is left default. Truth be told that if you change the default UAC setting from «Notify me only when apps try to make changes to my […]
Sometimes you want to work uninterrupted on a server and you definitely do not want to start notepad elevated in order to edit your stuff. There are of course many ways to do this, but I find myself using the following routine. Start an elevated CMD – Right click CMD and run as administrator. Run […]
If you try to run the command «wusa.exe c:\temp\file.cab /extract:c:\temp2\» you will in Windows 10 get this error: The reason Microsoft has removed this option is because of a security issue with the extract option. The reason I found out that this was removed was because I was trying to bypass UAC on Windows 10. […]