Posted past times James Forshaw, For the past times duad of months I’ve been presenting my “Introduction to Windows Logical Privilege Escalation Workshop” at a few conferences. The restriction of a 2 hr slot fails to create the topic jurist as well as some interesting tips as well as tricks I would similar to acquaint stimulate got to survive cutting out. So every bit the likelihood of a total grooming class whatever fourth dimension shortly is pretty low, I persuasion I’d pose together an irregular serial of spider web log posts which item small, self contained exploitation tricks which yous tin pose to usage if yous respect similar safety vulnerabilities inwards Windows. In this postal service I’m going to give a technique to give-up the ghost from an arbitrary directory creation vulnerability to arbitrary file read. Arbitrary management creation vulnerabilities create be - for example, here’s 1 that was inwards the Linux subsystem - but it’s non e'er obvious how you’d e...