lifer

lifer 一款用于检查Windows链接文件（即Windows快捷方式）的取证工具 简介 'lifer' 是一款Windows或nix命令行工具，其灵感来源于Harry Parsonage的白皮书《Link Files in Forensic Examinations》（可在此处获取）。该工具最初是我在担任计算机取证分析师期间为提取链接文件中的特定信息以协助调查而编写的轻量级工具。如今我已退休，但仍希望扩展其功能并公开发布，以便他人受益。...

Microsoft Windows Remote Code Execution Vulnerability

Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon of a malicious shortcut file. An attacker who successfully exploited this vulnerability could execute code as the logged-on user...

CVE-2019-1188

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed. An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. Users whose accounts are configured to have fewer user...

Microsoft windows DLL Load Arbitrary Code Execution Vulnerability

Microsoft Windows is an operating system developed by Microsoft. Microsoft Windows fails to properly parse shortcuts, allowing attackers to build malicious DLLs that are tricked into being loaded by applications and executed with application privileges...

VulnCheck KEV: CVE-2010-2568

Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon of a malicious shortcut file. An attacker who successfully exploited this vulnerability could execute code as the logged-on user...