Slides

The slides of this talk can be found here: SpecterOps - Shift Happens - Uncovering two builtin command injections in Windows context menus .pdf

Scenarios

• SH01 - Folder with payload in its name
• SH02 - Shortcut to a folder with payload in its name
• SH03 - Background of the explorer window of a folder with a payload in its name
• SH04 - Background of the explorer window of a folder with a payload in one of its parent's folders
• SH05 - A user with a payload in its name
• SH06 - Bring your own payload (exe)
• SH07 - Bring your own payload (ps script)

Contributing

Feel free to open a pull request if you have a different scenario to propose.