Later archive addition
Fun with URI Handlers
The article shows how a custom Origin URI passes attacker-controlled text into a Windows command line, permitting argument injection despite quoting. Injected Qt plugin-path arguments load a DLL from a remote share for code execution, while crafted .url shortcuts bypass modern browser encoding and can also suppress updates or spawn extra Origin instances.
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.