writeups.xyz / One Click to Compromise -- Fun With ClickOnce Deployment Manifests

Submitter : c2a

Date: 30 July 2020

Bounty : undisclosed

Vulnerabilities :

• NTLMv2 Hash Disclosure
• One-Click Execution of Arbitrary .Net Assemblies
• Windows

Programs :

• Microsoft

Authors :

• Dave Cossa (@G0ldenGunSec)

Link :
http://blog.redxorblue.com/2020/07/one-click-to-compromise-fun-with.html