Saturday, September 21, 2019

The Time I Chased a Cab (File): Zip Slip and Certificate Cloning

While doing research for a pretty large and complicated thick client assessment recently, I ended up diving down a rabbit hole involving cabinet files (.cab) as I noticed the application performing some interesting sequential functions. In a nutshell, the application would do the following with elevated processes: Retrieve a cab file Extract the...
Powered by Blogger.