Jonas VestbergJan 10, 2023
decoder_it
We did it again with #LocalPotato!
A not-so-common NTLM reflection attack allowing for arbitrary read/write. Basically EoP from user to SYSTEM.
Tracked as #CVE-2023-21746 - Windows NTLM EoP
Soon more details --> http://localpotato.com
cc
@splinter_code
www.localpotato.com

Jan 10, 2023 at 7:14pmWeb
Show threadJonas VestbergJan 10, 2023
@decoder_it @splinter_code if you would have found this a few months later, this would have been a "forever day" vuln in win7, win8 and win2k8r2 😄
Show threadsplinter_codeJan 11, 2023
@bugch3ck @decoder_it who said we don't have another one? 😂​
Show threadJonas VestbergJan 11, 2023
@splinter_code @decoder_it