Shift Happens: Uncovering Two Built-In Command Injections In Windows Context Menus -@Poda

Overview: This research uncovered two command injection vulnerabilities in the built-in Windows context menu system that simple and legitimate user interactions can trigger. Shift Happens - Uncovering Two Built-in Command Injections in Windows Context Menus Two long-standing command injection vulnerabilities were found in the Windows Explorer "Open PowerShell window here" extended context menu , triggered by crafted folder names such as "folder; calc". Slides The slides of this talk can be found here: Spe Details: cterOps - Shift Happens - Uncovering two builtin command injections in Windows context menus .pdf Slides The slides of this talk can be found here: SpecterOps - Shift Happens - Uncovering two builtin command injections in Windows context menus .pdf In this talk, we reveal two previously unknown command injection vulnerabilities in Windows context menus , affecting both