Tuesday, August 24th 2021
Hack a PC? Plug in a Razer Mouse with Automatic Synapse Installation
Over the past few generations, Razer has automated the download and installation of the Razer Synapse software by having it start the first time to plug in a Razer peripheral on your computer (mouse, keyboard, USB headset, etc.). This may be well-intentioned, but comes with a glaring security flaw, according to a LifeHacker report citing a security discovery by @j0nh4t on Twitter. Apparently, plugging in a Razer peripheral causes the Razer Synapse installer to prompt download and installation using a privileged Windows process (using Windows Update).
Once you download and run the installer, you can choose a custom installation folder for the application. This spawns a Windows Explorer dialog that is privileged and can access folders regular users probably don't have access to, as per an organization's group policy. Once in this dialog, you can simply shift+right-click on a folder, and click on "open PowerShell window here," to spawn a privileged PowerShell at that location, and knock yourself out with whatever it is you want to do to the machine. Visit the source link below for a video demo on how this hack works.
Sources:
j0nh4t (Twitter), LifeHacker
Once you download and run the installer, you can choose a custom installation folder for the application. This spawns a Windows Explorer dialog that is privileged and can access folders regular users probably don't have access to, as per an organization's group policy. Once in this dialog, you can simply shift+right-click on a folder, and click on "open PowerShell window here," to spawn a privileged PowerShell at that location, and knock yourself out with whatever it is you want to do to the machine. Visit the source link below for a video demo on how this hack works.
61 Comments on Hack a PC? Plug in a Razer Mouse with Automatic Synapse Installation
BTW I can do more than copy & paste. I'm pressed for time (pun intended).Nah, you are already under constant surveillance ... we know what you are thinking before you do. Self-determination ended with the internet. :shadedshu:For a triple hit: Coke-Cola, Cocaine & Internet (the 'new' coke). BTW I'm suggesting the song. ;)
Thanks but I'll stick with my original seeing even my cheap 901 redragon mice came with software/ driver cd's so it's not a big deal for companies to do this basic thing just some lazy trait companies are normalizing
People do still have and use cd/ dvd burners and if they don't then there's the link in the installation instructions to use to get the driver...
Some keyboards/mouse offer driverless customization, but personally I prefer to do it with software rather than remembering the button sequence needed to customize it.
You have options to not use driver with fancy peripherals, but you'll get less customization/feature, especially for RGB. Also generic mouse and keyboard don't need driver either.