Want to know what's in a folder you don't have a permission to access? Try asking your AV solution..., (Tue, Dec 29th)

SANS Internet Storm Center, InfoCON: green 2020-12-29

Summary:

Back in February, I wrote a diary about a small vulnerability in Windows, which allows users to brute-force names of files in folders, which they don't have permission to open/list[1]. While thinking on the topic, it occurred to me that a somewhat-complete list of files placed in a folder one can't access due to lack of permissions might potentially be obtained by scanning the folder with an anti-malware solution, which displays files which are currently being scanned.

Link:

https://isc.sans.edu/diary/rss/26932

From feeds:

Intel Hub ยป T01 - SANS Internet Storm Center, InfoCON: green

Tags:

Date tagged:

12/29/2020, 12:54

Date published:

12/29/2020, 09:16