pentester.land· May 17, 2023· by Nasreddine Bencherchali (@nas_bench)

LOLBINed — Finding “LOLBINs” In AV Uninstallers

Open Original Article ↗
Target Program: Kaspersky, F-Secure, Trend Micro, McAfee
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Local Privilege Escalation