13 ms·
It's also possible to create files whose names start (or contain) a NUL character. Doing so will trigger every single antivirus, but it's doable nonetheless and
by huhtenberg 3y ago
It's also possible to create files whose names start (or contain) a NUL character. Doing so will trigger every single antivirus, but it's doable nonetheless and messes a lot of things very thoroughly.
- Someone1234 3y agoAlso, possible in the Windows Registry, which no normal UI tools (inc. Reg Edit) could remove.
- 13of40 3y agoA similar quirk of the registry API is that it has a simplified set of methods that don't specify the data type of the value, so you can have an application that expects to read a null terminated string value, but substitute a binary value with no null termination. If the app doesn't handle that right, it's buffer overrun time. Usually that's foot-shooting, but sometimes you can do that in HKCU as a low privileged user to a value that gets read by a higher privileged process and causes it to "misbehave".
- ale42 3y agoYou can also create a file (or even better a folder) named CON or COM4. Good luck doing anything with it using the Explorer. (15 years ago I've seen some malware using that to make removal difficult)