组策略Software Restriction Policies (SRP)提权
Posted | archive
- rename
gpdisable.dll
todeskpan.dll
; - create a new folder and name it as
files.{42071714-76d4-11d1-8b24-00a0c9068ff3}
; - place
deskpan.dll
to the new folder; - open the folder;
- create a new rich text document in the folder;
- double-click the rich-text document.
- Wordpad runs with gpdisable.dll
- Bypassed :) We can run any process.
gpdisable下载
Comments