
Wannabe Red Teamer | OSEP | OSCP | Cybersecurity Consultant | Community Moderator/Advisor @offsectraining | I follow shit ton of illustrators | Views are my own
- Tweets979
- Following596
- Followers581
- Likes13.3K

ALT "Ouhhh Husbant" meme: Ouhhh... Husbant... You delete C:\inetpub, made PC vulnerable @ Now we are homress... Context: In April 2025 Microsoft pushed updates that created empty "C:\inetpub" folder. That piece of infinite wisdom was Microsoft's answer to CVE-2025-21204? Apparently, the best way to address a security issue is to litter everyone's root directory instead of, you know, actually fixing the underlying problem. Predictably, users saw the random junk folder and deleted it - making system vulnerable to LPE again 😸. But ofc you're free to get rid of "inetpub" and other trash in your root dir, coz there's much better solution for this and many other vulns: just prevent regular users from creating folders in the root folder! 👉 Run as admin to make your system much safer: icacls %SystemDrive%\ /remove *S-1-5-11 /grant *S-1-5-11:(OI)(CI)(IO)(M) (Note *S-1-5-11 is "Authenticated Users" sid: we just remove it and re-add it w/o "Add Directory" right for the root dir itself).
























