You can create a folder that resolves to one path when opened by your profile - another for everybody else. We need to use the shadow dir functionality to create a path will "fall through to shadow" for A but not for B. By creating symlink \??\GLOBALROOT we can do exactly that.
-
Show this thread
-
Now \??\GLOBALROOT resolves to one thing for your profile but opens \GLOBAL??\GLOBALROOT for everybody else. Create objdir \??\GLOBAL?? symlink \??\GLOBAL??\C: -> \??\GLOBAL?? and \??\GLOBAL??\mydir -> \??\c:\windows\temp
2 replies 0 retweets 2 likesShow this thread
Now a junction folder -> \??\GLOBALROOT\GLOBAL??\c:\mydir will resolve to c:\mydir for everybody else. But for your profile its c:\windows\temp Many naive impersonation based access check can be bypassed with this.
3:29 PM - 16 May 2020
0 replies
0 retweets
1 like
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.