4 ms·
hi, I wrote the advisory. Here's some POC I just published here: http://owned.lab6.com/~gossi/research/public/packager/ http://owned.lab6.com/~gossi/research/p
by gossitd 11y ago
hi, I wrote the advisory. Here's some POC I just published here: http://owned.lab6.com/~gossi/research/public/packager/ http://owned.lab6.com/~gossi/research/public/packager/
The SalesOrder.rtf file is safe to try at work. All it does is lock your workstation. It should work behind Software Restriction Policy and Microsoft AppLocker (and Citrix Application thingy).
- RKearney 11y agoThe RTF opened a zip folder with a .js file in it. Attempting to open it with the default Windows Based Script Host results in a dialog box from Software Restriction Policy stating that execution was blocked.