New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

611类型数据中的dcred #455

Open

Murasame-nc opened this issue Feb 28, 2023 · 0 comments

Murasame-nc commented Feb 28, 2023

611类型上报的数据中dcred字段，
看了下源码，大概理解了下:是会向上遍历进程cred字段然后进行比较，如果是这样的话，那提权成功之后，在提权之后的shell中也会持续不断的产生提权数据吧。这个不太符合逻辑吧。应该是与父进程的cred进行比较相对来说合理一点？

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment