To prevent rendering in Explorer's Preview Pane, you can delete/modify the handlers 13/16: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\PreviewHandlers O365: HKLM:\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\PreviewHandlers
Well, since @Microsoft didn't find my bug report to be worth rewarding or fixing anytime soon, I figured I'd drop the blog. Hoping Red Teams can enjoy using this technique to bypass Protected View in Office documents! 
#BugBounty #RedTeam #Hackinghttps://medium.com/@curtbraz/getting-malicious-office-documents-to-fire-with-protected-view-4de18668c386?sk=f0127383a6495b61ea4a3bd68a362ada …
-
-
-
Nice tip! Thanks
Kraj razgovora
Novi razgovor -
-
-
Honest question, how long did they take to get back to you?
-
About two weeks?
Kraj razgovora
Novi razgovor -
-
-
Could this work to pull a local file too? Maybe, for example, sending a zip file with an office doc like this, referencing a local file in the same archive?
-
Perhaps! Maybe file:///
Kraj razgovora
Novi razgovor -
-
-
Great Writeup.
-
Thanks!!
Kraj razgovora
Novi razgovor -
-
-
Curtis, could I repost this on my blog (all credit to you of course) ... I'll just make an intro of your discovery and link back to your site for the continued read on this subject
-
Hey go for it!
Kraj razgovora
Novi razgovor -
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.