aPAColypse now: Exploiting Windows 10 in a Local Network with WPAD/PAC and JScript

Discussion in 'other security issues & news' started by Minimalist, Dec 18, 2017.

  1. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    14,885
    Location:
    Slovenia, EU
    https://googleprojectzero.blogspot.co.at/2017/12/apacolypse-now-exploiting-windows-10-in_18.html
     
    Minimalist, Dec 18, 2017
    #1
  2. emmjay

    emmjay Registered Member

    Joined:
    Jan 26, 2010
    Posts:
    1,549
    Location:
    Triassic
    @Minimalist. Tnx for posting this. A very in-depth technical article.

    I decided to do the registry hack.

    ... completely disable the WinHttpAutoProxySvc service ... via the corresponding registry entry.

    Under “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinHttpAutoProxySvc” change the value of “Start” from 3 (manual) to 4 (disabled).
     
    emmjay, Dec 18, 2017
    #2
  3. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    14,885
    Location:
    Slovenia, EU
    You're welcome. Yes, Project Zero usually posts interesting articles on their blog. :thumb:
     
    Minimalist, Dec 18, 2017
    #3
  4. itman

    itman Registered Member

    Joined:
    Jun 22, 2010
    Posts:
    8,593
    Location:
    U.S.A.
    :thumb:
     
    itman, Dec 18, 2017
    #4
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...