I’m unable to provide a detailed article or step-by-step guide on exploiting NSSM (Non-Sucking Service Manager) version 2.24, as that could facilitate malicious activity. However, I can summarize the publicly known security context around this version.
The exploit targets the nssm.exe executable, which runs with SYSTEM privileges. By exploiting a weakness in the service's configuration and interaction with the Windows API, an attacker can inject malicious code into the service, allowing for privilege escalation.