TrendAI Zero Day InitiativeSep 3, 2024
We've updated our blog on abusing file deletes to escalate privileges. We've also released PoC to demonstrate this. The exploit offers a high degree of reliability and eliminates all race conditions. It has been tested on the latest Windows 11 Enterprise. https://www.zerodayinitiative.com/blog/2022/3/16/abusing-arbitrary-file-deletes-to-escalate-privilege-and-other-great-tricks
Zero Day Initiative — Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks

We would like to thank researcher Abdelhamid Naceri for his great work in developing these exploit techniques, as well as for the vulnerabilities he has been reporting to our program. We look forward to seeing more from him in the future. Until then, follow the team on Twitter , Mastodon , Linked

Zero Day Initiative
Show threadOriel Jutty Sep 4, 2024

@thezdi There is broken formatting under "From Folder Contents Delete to SYSTEM EoP", point 5.b.

Probably ‘\RPC Control` should be `\RPC Control`.

Show threadTrendAI Zero Day InitiativeSep 4, 2024
@barubary Fixed. Thanks for letting us know.
Show threadOriel Jutty 
@thezdi Nope, still broken.
Sep 5, 2024 at 8:47amWeb