针对于AzureAttestService服务的本地提权Eop，微软表示已经进行修复
magicAzureAttestService.exe -i -c \[cmd\]
主要是针对 SQL Server 2019的特定服务magicAzureAttestService
通过UNC欺骗实现以模拟管道的方式提权到SYSTEM用户，可以说是0Day，但是比较局限，微软已经修复:
-
Notifications
You must be signed in to change notification settings - Fork 2
crisprss/magicAzureAttestService
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
针对于AzureAttestService服务的本地提权Eop，微软表示已经进行修复
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published