logonui script gives a blank(black screen) and does not spawn cmd.exe

taviso / ctftool

Interactive CTF Exploration Tool

Apache License 2.0

1.64k stars 271 forks source link

Open tango-j opened 5 years ago

tango-j commented 5 years ago

winversion is 1709 win 10. will the exploit work?

niemand-sec commented 5 years ago

The offset of msctf!CTipProxy::Reconvert inside MSCTF!CStubIEnumTfInputProcessorProfiles::_StubTbl may be wrong. That worked for me.

taviso commented 5 years ago

I don't know if I tested 1709, but @niemand-sec is correct - it is probably just a case of finding the right offset.

What is the version of MSCTF.DLL?

tango-j commented 5 years ago

Hi @taviso , @niemand-sec how do we find the right offset?