- What: A technique exists to exploit the Service Failure Recovery feature of Windows Service to execute a payload.
- Impact: This allows execution without modifying the ImagePath.
You can exploit the Service Failure Recovery feature of Windows Service to execute a payload without ever touching the ImagePath. The biggest issue when exploiting Service Failure Recovery to execute a payload is figuring out how to trigger a "crash". submitted by /u/Cold-Dinosaur [link] [comments]