writeups.xyz / Pulling SYSTEM out of Windows GINA

Submitter : c2a

Date: 23 June 2023

Bounty : undisclosed

Vulnerabilities :

• Authentication Bypass
• Windows
• Local Privilege Escalation

Programs :

• Zoho (ManageEngine ADSelfService Plus)

Authors :

• Pedro Ribeiro (@Pedrib1337)
• João Bigotte
• Ashley King

Link :
https://github.com/pedrib/PoC/blob/master/advisories/ManageEngine/adselfpwnplus/adselfpwnplus.md