DEF CON 31 – New Novel WFP filter attack for privilege escalation

By John Reeman | August 22, 2023 |

NoFilter - Abusing WFP for privilege escalation

I recently returned from the DEF CON 2023 conference in Las Vegas and amongst many of the briefings that I attended the talk by Ron Ben Yizhak was particularly interesting. His talk was called “#NoFilter – Abusing Windows Filtering Platform for Privilege Escalation”. Whilst privilege escalation attacks are fairly common against the Windows platform…