0x00-0x00 / cve-2019-0841-bypass Goto Github PK

Hi Andre,

I have gone through your blog https://0x00-0x00.github.io/research/2019/05/30/Coding-a-reliable-CVE-2019-0841-Bypass.html and it is very well written.

So I thought of trying it out while doing red teaming at workplace. But unfortunately AntiVirus at workplace detects FakeDll.dll, diaghub_load.exe, and deletes it!

We tried to load our own DLL which was a basic reverse shell but it didn't work.
So I request you to provide the source code for FakeDll.dll and diaghub_load.exe if you can or at least tell me how to execute the batch file through DLL.

Any help is apprciated!

Tested on windows 10 17134.829 but didn't work

[+] Found edge version: 42.17134.1.0
[+] Creating hardlink bypass ... DONE!
[+] Checking File privileges of c:\windows\system32\license.rtf
[+] You don't have 'Modify/Write' privileges on this file ...
[+] Microsoft Edge is not running :)
[+] Checking if 'settings.dat' file exists ... YES
[!] Attempting to create a hardlink to target ... DONE
[+] Starting up Microsoft Edge to force reset ...
[!] Killing Microsoft Edge again ...
[+] Checking File privileges again ...
[+] Checking File privileges of c:\windows\system32\license.rtf
[+] You don't have 'Modify/Write' privileges on this file ...
[!] File Takeover Failed!
[!] File might be in use by another process or NT AUTHORITY\SYSTEM does not have 'Full Control' permissions on the file!
[!] Try another file ...

how does diag_hub work?