Oplocks are weird- if triggered on a file your oplocks handle have delete access on you can still rename the file AFTER oplock trigger:pic.twitter.com/XiU80p8j62
Show this thread
-
The real fun comes when you realise that now there is nothing stopping you from turning the now empty directory into a junction folder also- before you acknowledge the oplock. make symlink in \RPC Control named bait pointing at C.\windows\win.ini and point folder at rpc control
Show this thread
