Be better than yesterday

In this video, we will be going through two articles on discovering privilege escalation vulnerabilities on Windows computer via MSI packages, specifically through the MSI repair operations.

The first article shared was published in Mandiant back in July 2023 whereby they were able to identify zero days vulnerabilities on the Atera software, resulting in a privilege escalation.

The second article shared was published in October 2023 just earlier this month, whereby the author explores deeper on the issue highlighted by Mandiant, and was able to identify more than 30(!) privilege escalation vulnerabilities across several different vendors and security products!

Get a CVE under your name by looking for privilege escalation vulnerabilities on Windows system after learning and understanding the common pitfalls of MSI packages!

References used:
https://www.mandiant.com/resources/bl...
https://badoption.eu/blog/2023/10/03/...

DISCLAIMER:
All content posted on this Youtube channel is SOLELY FOR Educational and Awareness purposes ONLY. Any actions and/or activities related to the material presented in this Youtube channel is entirely YOUR responsibility.

We DO NOT promote, support, encourage any illegal activities such as hacking, and we WILL NOT BE HELD responsible in the event of any misuse and abuse of the content resulting in any criminal charges.

FREE Introductory to Phishing course on Udemy:
https://www.udemy.com/course/introto...

Stay connected:
Twitter:   / gemini_security  
Udemy: https://www.udemy.com/user/gemini88/
Github: https://github.com/geminisecurity
Discord:   / discord  

Gemini Security Awesome Hacking TShirts Support the channel:
https://www.redbubble.com/people/Gemi...

Looking to donate?
BTC: 19HiqQ2Qw83mxK9dcdoWb8VfAcsNgmp52k