https://d3bo.eu/en/tags/alwaysinstallelevated/Recent content in AlwaysInstallElevated on d3boHugo -- gohugo.ioenCopyright (c) 2025 HyasSun, 23 Jun 2024 00:00:00 +0000https://d3bo.eu/en/writeups/tryhackme/cyberlens/Sun, 23 Jun 2024 00:00:00 +0000https://d3bo.eu/en/writeups/tryhackme/cyberlens/In this machine, we exploit a CVE in Tika 1.17 that lets us inject commands on the target machine. For privilege escalation, we abuse the AlwaysInstallElevated setting to get a shell as NT AUTHORITY/SYSTEM.