Privilege escalation via the unintended UnattendedUtilities

Posted by tuxuser on Wednesday May 20, 2020 @01:32PM
from the billyhulbert.github.io dept.

https://billyhulbert.github.io/priv-esc-the-unintended-UnattendedUtilities/

( 3 comments | 46 points | on HN )

Re:Privilege escalation via the unintended UnattendedUtilities by gambiting on Wednesday May 20, 2020 @03:37PM (#23250846)

Yeah we have xbox devkits and that sounds pretty much right - as long as your "exploit" doesn't break retail mode, MS will almost certainly reply "good for you, have fun". Their developer mode is pretty open.

[ Parent | on HN ]

Re:Privilege escalation via the unintended UnattendedUtilities by aspenmayer on Wednesday May 20, 2020 @01:45PM (#23249672)

Good one. He even released his unattended script privilege escalation code:

https://github.com/billyhulbert/XboxUnattend

[ Parent | on HN ]

Re:Privilege escalation via the unintended UnattendedUtilities by haecceity on Wednesday May 20, 2020 @03:38PM (#23250851)

> This service is only registered and executed when an authorized Xbox One is running under Developer Mode and will not execute in a retail environment

Still neat.

[ Parent | on HN ]