CVE-2019-1388 PoC — Microsoft Windows Certificate Dialog 安全漏洞

Source

https://github.com/jas502n/CVE-2019-1388

Associated Vulnerability

Title:Microsoft Windows Certificate Dialog 安全漏洞 (CVE-2019-1388)
Description:Microsoft Windows和Microsoft Windows Server都是美国微软（Microsoft）公司的产品。Microsoft Windows是一套个人设备使用的操作系统。Microsoft Windows Server是一套服务器操作系统。Windows Certificate Dialog是其中的一个证书操作对话框组件。 Microsoft Windows Certificate Dialog中存在提权漏洞，该漏洞源于程序没有正确执行用户特权。攻击者可通过登录系统并借助特制的应用

Description

CVE-2019-1388 UAC提权 (nt authority\system)

Readme

# CVE-2019-1388 UAC提权 (nt authority\system)

![](./CVE-2019-1388.gif)

## 0x01 demo

```
SERVER
======

Windows 2008r2	7601	** link OPENED AS SYSTEM **
Windows 2012r2	9600	** link OPENED AS SYSTEM **
Windows 2016	14393	** link OPENED AS SYSTEM **
Windows 2019	17763	link NOT opened


WORKSTATION
===========

Windows 7 SP1	7601	** link OPENED AS SYSTEM **
Windows 8		9200	** link OPENED AS SYSTEM **
Windows 8.1		9600	** link OPENED AS SYSTEM **
Windows 10 1511	10240	** link OPENED AS SYSTEM **
Windows 10 1607	14393	** link OPENED AS SYSTEM **
Windows 10 1703	15063	link NOT opened
Windows 10 1709	16299	link NOT opened
...
```

![](./1.jpg)

![](./2.jpg)

![](./3.jpg)


## 参考链接

https://github.com/Lz1y/imggo

https://www.zerodayinitiative.com/blog/2019/11/19/thanksgiving-treat-easy-as-pie-windows-7-secure-desktop-escalation-of-privilege

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1388

https://gist.github.com/gentilkiwi/802c221c0731c06c22bb75650e884e5a

File Snapshot


 [4.0K]  /data/pocs/9751f609e73b3f794455f5504a8425a6fdd45dd5
├── [115K]  1.jpg
├── [196K]  2.jpg
├── [210K]  3.jpg
├── [1.9M]  CVE-2019-1388.gif
├── [715K]  HHUPD.EXE
└── [1007]  README.md

0 directories, 6 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!