Create WorkFolders.yml

[ElliotKillick]

New execute lolbin: WorkFolders.exe

[wietze]

Hey @ElliotKillick could you elaborate on this one? I'm not quite how it works/what it does from the description. There are no resources available to get more details either... e.g. it references control.exe, what's the significance of that?

[ElliotKillick]

Hi @wietze, I took the liberty of adding a resources section to clear up any ambiguity in the description:
https://twitter.com/ElliotKillick/status/1449812843772227588

WorkFolders.exe is a small wrapper binary for control.exe with a parameter to open up the specified Control Panel menu. It does this with ShellExecute(), the problem arises because WorkFolders.exe fails to specify the full C:\Windows\System32\control.exe path instead just opting for control.exe. This causes ShellExecute() to first check the current working directory for control.exe thus how we get code execution.

[api0cradle]

Awesome! Thanks for this contribution