My second blog in attack surface analysis is out. This time I will talk about "Custom Protocol Handlers" and discuss 10 bugs (none are mine). Custom protocol handlers are a great way to convert a local attack to a remote one.https://parsiya.net/blog/2021-03-17-attack-surface-analysis-part-2-custom-protocol-handlers/ …
also I like this vuln class: desktop.ini with [.ShellClassInfo] DirectoryClass=WindowsBackupFolderOptions can you figure out how to do the parameter injection ? :D
