Куплю эксплойт RCE protocolhandler (aka Follina)

[AlterAPT]

Готов приобрести 0day/1day(notfix) уязвимость обработчика protocolhandler
Требования: запуск команды, исполнение кода
Url должен быть включен в пакет Windows, или предустановленное приложение
Желательно: редроп текущего процесса(запуск вне основного процесса)
бюджет 350k$ (работа строго через гаранта)

 

[AlterAPT]

так же готов рассмотреть решения связанные с обработкой MSHTML IE(MSO) (обход патча)

 

[Windefender]

IE would be completely disabled in windows. All researchers after follina are trying to find code execution in URI handlers. If one is vulnerable we will soon see some exploit.

 

[vxero]

тыц, тут ничего не было

 

[AlterAPT]

IE would be completely disabled in windows. All researchers after follina are trying to find code execution in URI handlers. If one is vulnerable we will soon see some exploit.

by the time of public publication, any exploit associated with the protocol handler will be detected and possibly patched, finding an exploit for it is not an easy task, I personally know 3 non-patched URLs, but they all work when the registry is modified (parameters), and I hope that there will be a person who can offer a non-standard solution

 

[AlterAPT]

тыц, тут ничего не было

Follina не интересует

 

[AlterAPT]

Актуально, готов рассмотреть эксплойты на MS Word (любые 0day) up to 400k

 

[Royal_club]

Сорри ТС, тоже интересует актуальный сплойт под доки, куплю как код таки готовые файлы.

 

[no1]

by the time of public publication, any exploit associated with the protocol handler will be detected and possibly patched, finding an exploit for it is not an easy task, I personally know 3 non-patched URLs, but they all work when the registry is modified (parameters), and I hope that there will be a person who can offer a non-standard solution

if someone can build a working fix for folina using a working URI that dont need editing of any components as registery, would it be eligible to 400k ?

 

[Windefender]

if someone can build a working fix for folina using a working URI that dont need editing of any components as registery, would it be eligible to 400k ?

The thread author already mentioned such price. And if it is multiple sale, and price lower I would also be interested.

 

[AlterAPT]

актуально, исключительно комплексные решения для MS Word

 

[casa_doggo]

up-to-date, exceptionally complex solutions for MS Word

i dont understand, ur still looking for a solution or u have found it and are intrested in selling ? if its the second option we might have something to talk about.