Privilege Escalation from Medium to High Integrity Level in Windows

Privilege Escalation from Medium to High Integrity Level in Windows

Explore a groundbreaking security talk from Ekoparty 2023 that unveils a critical Windows design flaw allowing privilege escalation from Medium to High integrity level. Delve into the combination of a recently revealed Windows "functionality" and an insufficient check that enables deterministic privilege escalation with 100% reliability. Learn about the evolution of privilege escalation attacks and Microsoft's efforts to mitigate them. Witness a live demonstration of a fully functional exploit launching elevated processes on the latest Windows versions. Gain insights from security researcher Nicolas Alejandro Economou's 17+ years of experience in exploit writing and offensive security research.