Gh0st
/
PowerSploit
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

PowerUp.ps1:880 - Remove "C:\" False Positives 

By default, the C:\ folder has special permissions set that allow unprivileged users to create new folders, but not to create or modify files in C:\ . This special permission set is misinterpreted by the script as a writable folder in the path, even though it is not. The proposed change removes results that return C:\ (subfolders within C:\ are still returned if they are modifiable).
This commit is contained in:
Bubbl3H3d 2017-10-01 16:28:24 -04:00 committed by GitHub
parent c5eb994f84
commit db3ce7959c
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Privesc/PowerUp.ps1
View File

@ -877,7 +877,7 @@ a modifiable path.
# if the path doesn't exist, check if the parent folder allows for modification
try {
$ParentPath = (Split-Path -Path $TempPath -Parent -ErrorAction SilentlyContinue).Trim()
if ($ParentPath -and ($ParentPath -ne '') -and (Test-Path -Path $ParentPath -ErrorAction SilentlyContinue)) {
if ($ParentPath -and ($ParentPath -ne '','C:\') -and (Test-Path -Path $ParentPath -ErrorAction SilentlyContinue)) {
$CandidatePaths += Resolve-Path -Path $ParentPath -ErrorAction SilentlyContinue | Select-Object -ExpandProperty Path
}
}