Installing Razr devices on Windows allows privilege escalation!
#cososec
//
Need local admin and have physical access?
- Plug a Razer mouse (or the dongle)
- Windows Update will download and execute RazerInstaller as SYSTEM
- Abuse elevated Explorer to open Powershell with Shift+Right click
Tried contacting @Razer, but no answers. So here's a freebie https://t.co/xDkl87RCmz
@voltronic a 4 dollar raspberry pi pico can do it too.
@chirpSec
Funny you should post the o.mg cable, because of course it can imitate a Razr device and automate the driver install process:
https://twitter.com/_MG_/status/1429293225181814784