Skip to content

Windows LNK/URL shortcut auto-binding hotkey (not a bug, feature)

Notifications You must be signed in to change notification settings

defcon-russia/shortcut_auto_bind

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 

Repository files navigation

shortcut_auto_bind

Windows LNK/URL shortcut auto-binding hotkey (not a bug, feature)

This is a small note about one MS Windows feature, that could be not known to everyone. At least I did not know about it before I did this small research.

Explorer on startup will parse all URL/LNK files (PIF... if you are old) and get hot-key value. Then it will be registered with a hook.

Shortcut

Of course, you can add raw value of hot-key code, so it can bypass windows limitation ("CTRL+ALT+..." only), and with this simple trick you can register, for example, DEL key or ESC.. or almost anything.

This is a feature, of course, not a bug, but it can be abused by malware guys (as autorun by trigger)... so good thing to know.

LNK: Edit lnk

URL: Shortcut

Explorer.exe on stratup... Explorer

Path from where explorer.exe will search for shortcuts

  • %AppData%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar .
  • %AppData%\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts
  • %AppData%\Microsoft\Windows\Start Menu
  • %UserProfile%\Desktop

PoC:

Copy "Internet Explorer.lnk" to the Desktop, restart PC (or just restart explore.exe), press DEL.

About

Windows LNK/URL shortcut auto-binding hotkey (not a bug, feature)

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published