From b300b51045092aae4b01ff97e2fa137d7c00ef59 Mon Sep 17 00:00:00 2001 From: "Mariusz B. / mgeeky" Date: Thu, 22 Dec 2022 10:21:52 +0100 Subject: [PATCH] Added msi-shenaningans --- file-formats/README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/file-formats/README.md b/file-formats/README.md index 961a164..28bf263 100644 --- a/file-formats/README.md +++ b/file-formats/README.md @@ -1,5 +1,7 @@ ## File-Formats Penetration Testing related scripts, tools and Cheatsheets +- [**`msi-shenanigans`**] - Proof of Concept code and samples presenting emerging threat of MSI installer files. Based on my [MSI Shenanignas 1 - Offensive Capabilities Overview](https://mgeeky.tech/msi-shenanigans-part-1/) research conducted. + - [**`PackMyPayload`**](https://github.com/mgeeky/PackMyPayload) - A script that takes file/directory on input and creates a new (or backdoors existing) container file with input ones embedded. Some of the formats (ISO, IMG, VHD, VHDX) could be used to bypass Mark-of-the-Web (MOTW) file taint flag. Supported formats: 1. `ZIP` (+password) 2. `7zip` (+password)