CVE-2019-15511 PoC — GOG Galaxy 安全漏洞

Source

Associated Vulnerability

Description

GOG Galaxy Exploit for CVE-2019-15511

Readme

# GOG Galaxy Exploit for CVE-2019-15511
```
usage: exploit.py [-h]
                 [--action {LaunchElevatedRequest,FixDirectoryPrivilegesRequest,CreateDirectoryRequest,QueryProcessInfoRequest,InstallServiceRequest,DeleteServiceRequest,MoveAndVerifyGlobalDependencyRequest}]
                 target

positional arguments:
  target

optional arguments:
  -h, --help            show this help message and exit
  --action {LaunchElevatedRequest,FixDirectoryPrivilegesRequest,CreateDirectoryRequest,QueryProcessInfoRequest,InstallServiceRequest,DeleteServiceRequest,MoveAndVerifyGlobalDependencyRequest}
```

It exploits lack of auth when sensitive GalaxyClientService methods are called. Try `FixDirectoryPrivilegesRequest` (grants EVERYONE access to target
file) or `CreateDirectoryRequest` (creates directory in target location) to see it in action.

File Snapshot

 [4.0K]  /data/pocs/26cae096266d00d0f10d7a5335e3159c630a15c1
├── [2.7K]  exploit.py
└── [ 850]  README.md

0 directories, 2 files

Remarks