[user mistake] Failed to detect the writable program/script in task scheduler jobs

[d0gkiller87]

Test Environment:

Windows 1809 Build 17763.1577, PowerShell 1.0

Steps to Reproduce:

1. Log in to a administrator account
2. Create a powershell script
3. Make the script writable by everyone (go to the security tab of the file attributes and change it)
4. Create a task scheduler job, set the action to run the script above with the highest privileges
5. Log in to a low privilege account
6. Run PrivescCheck
7. Result:

   | OK | None | SCHEDULED TASKS > Binary Permissions                            |
   | OK | None | SCHEDULED TASKS > Unquoted Path                                 |
   | OK | None | SCHEDULED TASKS > Binary Permissions                            |
   | OK | None | SCHEDULED TASKS > Unquoted Path                                 |

Description:

The configuration above allows the program/script (runs with a high privilege) to be changed by anyone. However PrivescCheck failed to detect it.

[d0gkiller87]

My mistake. The task was not accessible by the low privilege account at all. Thus PrivescCheck cannot get the information at all is reasonable.