GoKawiilMSI Center - How to gain SYSTEM privileges in seconds
After finding severe vulnerabilities in both AMD’s and ASUS’s OEM software, I wanted to expand my horizons by finding issues in more gaming products.
I ended up settling on MSI Center, because it seems to come preinstalled on all of their laptops and pre-built desktops, meaning any vulnerability I found would likely have widespread implications.
Downloading and Extraction
The first step in this process is to always download the offline installer.
A lot of these companies either block the installer from running on unsupported hardware or only allow for the installation of a small selection of their software.
Once you have a copy of the offline installer, you need to run it through Detect-It-Easy and pray. If you get lucky, it might just tell you what software is being used to package MSI Center.
In our case, we got lucky, and it told us that MSI Center is packaged using something called Inno Setup.
There is a tool made specifically for this situation called innoextract.
After extracting the installer and the .appxbundle contained within (it’s just a .zip file), it was time to decompile the executables.
... continue reading