EIP-2026-117522

This Metasploit module exploits weak service permissions on Windows to escalate privileges to SYSTEM by either creating a new service or hijacking an existing one with insecure file or configuration permissions. It uploads a malicious executable, replaces the service binary or reconfigures the service, and restarts it to gain a SYSTEM session.