Magnifying Glass accessibility abuse USES cmd.exe
Mobman replaced magnify.exe with cmd.exe to obtain a command prompt at the login screen.
Explicit Confidence 99% · Mobman EP 20 Details
“I deleted Magnify and renamed cmd.exe to magnify”
Technique
technique:magnifying_glass_accessibility_abuse
Also: accessibility-feature abuse, magnify.exe replacement
The replacement of the Windows Magnify accessibility executable with cmd.exe to obtain a command prompt at the login screen.
The replacement of the Windows Magnify accessibility executable with cmd.exe to obtain a command prompt at the login screen.
“I deleted Magnify and renamed cmd.exe to magnify”
“it brings up the accessibility magnify which was actually command prompt”
Magnifying Glass accessibility abuse USES cmd.exe
Mobman replaced magnify.exe with cmd.exe to obtain a command prompt at the login screen.
Explicit Confidence 99% · Mobman EP 20 Details
“I deleted Magnify and renamed cmd.exe to magnify”