Galactical Bug Hunting: How we discovered new issues in CD Projekt Red's Gaming Platform - Anvil Secure
www.anvilsecure.com
As a researcher I often run into situations in which I need to make a compiled binary do things that it wouldn’t normally do or change the way it works in some way. Of course, if one…
  • onlinepersona@programming.devEnglish
    11·
    3 months ago

    As soon as they mentioned FixDirPrivileges as a command sent over IPC to a privileges process, I knew it was over. Being able to give read-write access to “Everybody” simply by sending a command is asking for trouble. They might’ve even taken the long route of creating a DLL that the privileged process loads. Is it no possible to replace the privileged process altogether with any random binary?

    Anti Commercial AI thingy

    CC BY-NC-SA 4.0