Persistence – Change Default File Association

ID PENTESTLAB:7D724911F3500E7175F0D5F57E17E9B1
Type pentestlab
Reporter Administrator
Modified 2020-01-06T09:38:00


In Windows environments every file extensions are associated with a default program. This allows Windows to identify which program needs to be used in order to open a specific file. The associations of extensions with programs is handled through the registry. However, it is possible to hijack registry keys which handle the default program for […]