Its common knowledge that a folder with desktop.ini of: [.ShellClassInfo] CLSID2={0AFACED1-E828-11D1-9187-B532F1E9575D} Flags=2 and a .lnk file named target pointing at a folder will show content of lnk file target folder inside. But what happens when lnk file points at cmd.exe
-
Show this thread
-
It is a quiz- first one to get right wins a shell ps. the folder must be attrib +r
1 reply 0 retweets 0 likesShow this thread -
Replying to @jonasLyk
this is from vault7. they were using it to hide lnk vulns behind junction folders. it also works if you use library files. bonus if you have a special file like COM1 or .. inside of it you cant delete the dir without the shortname
1 reply 0 retweets 0 likes -
Replying to @jackson5_sec
that part is well known- this is about making the lnk file target cmd.exe
1 reply 0 retweets 0 likes -
Replying to @jonasLyk
Nothin but a clsid hijack on that junction. Inprocserver32
1 reply 0 retweets 0 likes -
Replying to @jackson5_sec
try clicking the folder in the treepane to the left in explorer
1 reply 0 retweets 1 like
Replying to @jonasLyk @jackson5_sec
i did say winner of quiz got shell ;)
10:38 AM - 2 Jul 2020
0 replies
0 retweets
0 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.