active setup persistence

[h00die]

fixes #20824

Windows has a feature called active setup. You notice it when you login and a grey box pops up in the top left of the screen, talking about configuring personalizations bla bla bla. We can abuse that to launch our payload, with 2 caveats. 1) you downgrade from admin to user permissions, 2) it only launches the payload once per user

Verification

1. Start msfconsole
2. Get an admin level shell on windows
3. Do: use exploit/windows/persistence/registry_active_setup
4. Do: set session #
5. Do: run
6. You should get a shell when a user logs in.