search

Linuxfabrik / monitoring-plugins

220+ check plugins for Icinga and other Nagios-compatible monitoring applications. Each plugin is a standalone command line tool (written in Python) that provides a specific type of check.
https://linuxfabrik.ch
The Unlicense
220 stars 51 forks source link

Windows Plugins: DLL, EXE & PY Side loading #574

Closed markuslf closed 2 years ago

markuslf commented 2 years ago

Describe the bug For example, when starting users.exe, Windows tries to load the following non-existent DLL's:

A local attacker may be able to abuse this for privilege escalation (gaining admin rights) or persistence (installing a backdoor): https://attack.mitre.org/techniques/T1574/002/

markuslf commented 2 years ago

Have a look at https://github.com/Linuxfabrik/monitoring-plugins/blob/main/.github/workflows/nuitka-compile.yml on how we compile the plugins for Windows using Nuitka. We cannot further fine-tune the compile or loading behavior. Therefore closing this issue.