Being Stubborn Pays Off pt. 1 – CVE-2018-19204

A hands-on exploit development blog for CVE-2018-19204 in PRTG Network Monitor showing how the HttpAdvancedSensor.exe 'writeresult' parameter can be manipulated (via the proxyport_ sensor setting) to write and execute arbitrary files with SYSTEM privileges; the author documents discovery, reversing of the sensor binary, and a proof-of-concept that leverages default/authenticated access to gain local administrative control.