6 ms·
Not necessarily. You could, for instance, elevate the privileges of a process you can't completely control, which might allow you to read sensitive files or dis
by darawk 8y ago
Not necessarily. You could, for instance, elevate the privileges of a process you can't completely control, which might allow you to read sensitive files or disrupt a system, but not perform arbitrary actions with those privileges.
- Sohcahtoa82 8y agoI concede that privesc without code execution can be useful, but my original claim that privesc is not necessarily code execution still stands.
- darawk 8y agoI think we agree then? I said "assuming you can execute arbitrary code with the elevated privileges".