Skip to content
← LibraryTechnique entry
W-SVC-UNQUOTEDPrivilege Escalation

Unquoted Service Path

Service binary path contains spaces, no quotes, and a writable parent directory — drop C:\Program.exe to hijack the service start.

§ Where this technique fits

W-SVC-UNQUOTED is catalogued under the Privilege Escalation tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.