winget: Install ROGUE Software & Packages?
26,992
Published 2023-04-20
🔥 YOUTUBE ALGORITHM ➡ Like, Comment, & Subscribe!
🙏 SUPPORT THE CHANNEL ➡ jh.live/patreon
🤝 SPONSOR THE CHANNEL ➡ jh.live/sponsor
🌎 FOLLOW ME EVERYWHERE ➡ jh.live/discord ↔ jh.live/twitter ↔ jh.live/linkedin ↔ jh.live/instagram ↔ jh.live/tiktok
💥 SEND ME MALWARE ➡ jh.live/malware
All Comments (19)
-
Love it, I use winget all the time as a System Engineer
-
I did not validate this with the winget docs, but if setting the LocalManifestFiles configuration would modify the user settings of winget, why would an attacker not simply edit that file to have the setting on instead of having to impersonate local admin? I think this would explain why changing the setting does not edit the user settings json.
-
Little tip, around 6:24 you exit the terminal to open up a new admin one. I don't know about you but that gets a little annoying for me to do so I found this tool called "gsudo". You can call it as gsudo or just sudo. If you just type `gsudo` it will do a UAC prompt and then bring you to a new privliaged powershell environment, but if you do `gsudo [commands ...]` it will just do that command with admin privliages and then bring you back to your normal environment. I find it pretty handy
-
Interesting....
-
Its kewl
-
Uhhh, didn’t know about winget at all. Thanks man, very interesting.
-
Just 31 comments. Damn. Hehe. I saw this on my feed many hours ago, but now I'm here, at 21 hours ago posted status. Hehe
-
Probs malware...well, someone was going to say it eventually.
-
I always wonder. Malwarebytes uses LOL strings. Whut
-
So if I interpret it correctly, these LOLBAS things are like syskey.exe in the past?
-
Neat. Also, I am pretty sure that unzipping a folder can trigger network activity... Not gonna talk about it here, since i would be using it as my own 0-day. (Or is John interested?)
-
sixth comment posted here <3 Love you all
-
i was watching ...
-
He uses PowerShell instead of cmd. Is there any reason as to why?
-
Okay, i am first
-
TIL that winget is a thing. Will have to use it when I next need to install software on Windows. Might stop me from going crazy.
-
why have winget download and execute the virus if you have a shell already? why not do it yourself?
-
There no audio
