phoneinfo.dll

[TreeKelp]

Once built and ran, it creates a file in sys32 called phoneinfo.dll. The console was frozen on 'Attempting to spawn shell' so I closed it. When trying to re-run it, it tells you to delete phoneinfo.dll; which isn't possible without Admin. Is there a work around?

[bytecategory]

Update the program's ACL and owner.

[Salah-Code-Lab]

Update the program's ACL and owner.

Requires Admin to change owner ship from administrators to local users
If Owned by Admin Group it can be done and i don't remember if it asks you for elevation or not
but if you were in a standard account with no Admin Rights it would fail

Go AnD LeArN CoMPuTer FunDemEntAls

[Salah-Code-Lab]

Once built and ran, it creates a file in sys32 called phoneinfo.dll. The console was frozen on 'Attempting to spawn shell' so I closed it. When trying to re-run it, it tells you to delete phoneinfo.dll; which isn't possible without Admin. Is there a work around?

Now its fine to delete the file even if you were admin because the Exploit is a PoC and any dll that is from Windows that can be opened with certain handles and provides certain Properties are needed

i'd say just Delete Phoneinfo.dll even if it required Admin because getting the thing working is better than staying stuck on what if's
seeing the actual execution is better than not seeing it
that is my Opinion though

[bytecategory]

Update the program's ACL and owner.

Requires Admin to change owner ship from administrators to local users If Owned by Admin Group it can be done and i don't remember if it asks you for elevation or not but if you were in a standard account with no Admin Rights it would fail

Go AnD LeArN CoMPuTer FunDemEntAls

C:\Users\usr>echo hello > hello.txt

C:\Users\usr>echo hello > hello1.txt

C:\Users\usr>takeown /f hello.txt /a

SUCCESS: The file (or folder): "C:\Users\usr\hello.txt" now owned by the administrators group.

C:\Users\usr>icacls hello.txt /setowner normaluser
processed file: hello.txt
Successfully processed 1 files; Failed processing 0 files

C:\Users\usr>icacls hello.txt /deny Administrators:(D)
processed file: hello.txt
Successfully processed 1 files; Failed processing 0 files

C:\Users\usr>icacls . /deny Administrators:(DC)
processed file: .
Successfully processed 1 files; Failed processing 0 files

C:\Users\usr>del hello1.txt

C:\Users\usr>del hello.txt
C:\Users\usr\hello.txt
Access is denied.

C:\Users\usr>icacls hello.txt /remove:d Administrators
processed file: hello.txt
Successfully processed 1 files; Failed processing 0 files

C:\Users\usr>del hello.txt

I hope you can understand.