module
GOG GalaxyClientService Privilege Escalation
Disclosed | Created |
---|---|
Apr 28, 2020 | Jun 15, 2020 |
Disclosed
Apr 28, 2020
Created
Jun 15, 2020
Description
This module will send arbitrary file_paths to the GOG GalaxyClientService, which will be executed
with SYSTEM privileges (verified on GOG Galaxy Client v1.2.62 and v2.0.12; prior versions are
also likely affected).
with SYSTEM privileges (verified on GOG Galaxy Client v1.2.62 and v2.0.12; prior versions are
also likely affected).
Author
Joe Testa jtesta@positronsecurity.com
Platform
Windows
Architectures
x86, x64
References
Module Options
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.