Service DACL false positive

KimpusMaximus · Sep 13, 2016 · 5ac6c91 · 5ac6c91
1 parent 5e2200b
commit 5ac6c91
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Privesc/PowerUp.ps1 b/Privesc/PowerUp.ps1
@@ -1404,7 +1404,7 @@ function Test-ServiceDaclPermission {
                         else {
                             ForEach($TargetPermission in $TargetPermissions) {
                                 # check permissions || style
-                                if (($ServiceDacl.AccessRights -band $AccessMask[$TargetPermission]) -eq $AccessMask[$TargetPermission]) {
+                                if (($ServiceDacl.AceType -eq 'AccessAllowed') -and ($ServiceDacl.AccessRights -band $AccessMask[$TargetPermission]) -eq $AccessMask[$TargetPermission]) {
                                     Write-Verbose "Current user has '$TargetPermission' for $IndividualService"
                                     $TargetService
                                     break