LOLBAS/AcroRd32.exe.md at master

mirror/LOLBAS

Fork 0

mirror of https://github.com/LOLBAS-Project/LOLBAS synced 2025-01-20 10:14:34 +01:00

Oddvar Moe 550263cd1e Removed MD files, we only use the webportal from now on. All MD files moved to archive

2018-10-25 18:31:11 +02:00

441 B

Raw Permalink Blame History

AcroRd32.exe

Functions: Execute


Replace C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe by your binary
Hijack RdrCEF.exe with a payload executable to launch when opening Adobe

Resources:
- https://twitter.com/pabraeken/status/997997818362155008
Full path:
- C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\
Notes: Thanks to Pierre-Alexandre Braeken - @pabraeken

441 B Raw Permalink Blame History

AcroRd32.exe

441 B

Raw Permalink Blame History