search

PowerShellMafia / PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework
Other
11.9k stars 4.61k forks source link

PowerUp.ps1:883,1458 - Remove "C:\" False Positives #259

Closed Bubbl3H3d closed 7 years ago

Bubbl3H3d commented 7 years ago

By default, the C:\ folder has special permissions set that allow unprivileged users to create new folders, but not to create or modify files in C:\ . This special premission set is misinterpreted by the script as a writable folder in the path, even though it is not. The proposed change removes results that return C:\ (subfolders within C:\ are still returned if they are modifiable).

Bubbl3H3d commented 7 years ago

Submitted to Dev: https://github.com/PowerShellMafia/PowerSploit/pull/262