diff options
| author | Nick Landers <monoxgas@yahoo.com> | 2016-09-13 15:43:34 -0600 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2016-09-13 15:43:34 -0600 |
| commit | 5ac6c919ddc0684f55366af3c70ae472f69831bd (patch) | |
| tree | e398831cd4888b02fa2cc2223dabbe7b3372fdbe /Privesc | |
| parent | 5e2200bab7aedd092965d84722f3e5a1c0cf4329 (diff) | |
| download | PowerSploit-5ac6c919ddc0684f55366af3c70ae472f69831bd.tar.gz PowerSploit-5ac6c919ddc0684f55366af3c70ae472f69831bd.zip | |
Service DACL false positive
Diffstat (limited to 'Privesc')
| -rw-r--r-- | Privesc/PowerUp.ps1 | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/Privesc/PowerUp.ps1 b/Privesc/PowerUp.ps1 index 977efda..c1b9072 100644 --- a/Privesc/PowerUp.ps1 +++ b/Privesc/PowerUp.ps1 @@ -1404,7 +1404,7 @@ function Test-ServiceDaclPermission { else { ForEach($TargetPermission in $TargetPermissions) { # check permissions || style - if (($ServiceDacl.AccessRights -band $AccessMask[$TargetPermission]) -eq $AccessMask[$TargetPermission]) { + if (($ServiceDacl.AceType -eq 'AccessAllowed') -and ($ServiceDacl.AccessRights -band $AccessMask[$TargetPermission]) -eq $AccessMask[$TargetPermission]) { Write-Verbose "Current user has '$TargetPermission' for $IndividualService" $TargetService break |