Windows Persistency With OpenVPN GUI

OpenVPN GUI will automatically run the following batch files if it exists. No changes to config file is needed, just drop the batch file in place. Possible privilege escalation if user runs OpenVPN GUI with administrator privileges and uses a VPN config in his home directory.

  1. %HOMEPATH%\OpenVPN\config\(config name)_pre.bat (Before connection initiated)
  2. %HOMEPATH%\OpenVPN\config\(config name)_up.bat (After connection setup)
  3. %HOMEPATH%\OpenVPN\config\(config name)_down.bat (After connection teardown)
  4. %PROGRAMFILES%\OpenVPN\config\(config name)_pre.bat
  5. %PROGRAMFILES%\OpenVPN\config\(config name)_up.bat
  6. %PROGRAMFILES%\OpenVPN\config\(config name)_down.bat

image



Tags: Security

Similar Articles

Yubikey passwordless Windows local account login - Yubico used to publish a Windows Store application YubiKey for Windows Hello that allowed local non-domain joined accounts to login to Windows simply by inserting the YubiKey. However, that ...
Crash Windows Event Logging Service - While trying to write an undetectable event log cleaner, I delved into the NTAPIs to try to prevent Event ID 1102 from being created. In the process, I stumbled upon a way to crash the Windows ...
windows file metadata - Windows seems to keep a very poor record of file attributes such as date created, date modified and date accessed. These attributes are important especially for audit purposes. My profs are even ...
Windows Trust Boundaries - Understanding Windows trust boundaries is important as a penetration tester as security vulnerabilities are usually found at these boundaries. As an application developer, understanding these ...