cve-2014-4113: Hurricane Panda (HURRICANE PANDA) win64bit lift right 0day flaw

Hurricane pandas are thought to be advanced attackers originating in China, primarily for infrastructure companies. We know that they have a 0day flaw in it. There are three other local elevation of privilege vulnerabilities. We know that Hurricane Panda uses the "Chinachopper" Webshell, and once this Webshell is uploaded, the operator can attempt to elevate the privileges and then obtain the legitimate credentials of the target access through various password hack tools.

Local experimental results

With the 0sayTest.exe cmd command, the open permissions change from the original xiaoju to system.

watermark/2/text/ahr0cdovl2jsb2cuy3nkbi5uzxqveglhb2nhawp1/font/5a6l5l2t/fontsize/400/fill/i0jbqkfcma==/ Dissolve/70/gravity/southeast "/>

cve-2014-4113: Hurricane Panda (HURRICANE PANDA) win64bit lift right 0day flaw