CVE-2023-36165

This exploit demonstrates an unquoted service path vulnerability in MiniTool Partition Wizard ShadowMaker v12.7. The PoC shows how the service path lacks quotes, allowing potential privilege escalation via executable spoofing in the path.

This repository contains a writeup detailing an unquoted service path vulnerability in MiniTool Partition Wizard ShadowMaker v.12.7, which allows local privilege escalation via the SchedulerService.exe component. The PoC demonstrates how to identify the vulnerable service using WMIC and SC commands.