Hyper-V-admin-EOP icon indicating copy to clipboard operation
Hyper-V-admin-EOP copied to clipboard

Cannot create hardlink

Open cosad3s opened this issue 2 years ago • 0 comments

My current user does not have access to Powershell, so I tried to make hardlink from batch and executable. I do not have the "license.rtf", so I targetted another files for testing purposes.

  • I have tested "CreateHardlink.exe" from https://github.com/googleprojectzero/symboliclink-testing-tools.
  • I have tested mklink /h mydisk.vhdx C:\Windows\System32\LaptopPlugInToastImg.gif for example.

Same error message : Access is denied.

This reference explain that the target file should have now FILE_WRITE_ATTRIBUTES for the current user: https://googleprojectzero.blogspot.com/2015/12/between-rock-and-hard-link.html. Another ref: https://twitter.com/gebaltas/status/1237489658730147840

I think this kind of exploit concerning Hyper-V is obsolete now due to hardlink mitigations, right ?

cosad3s avatar Jan 24 '23 14:01 cosad3s