Skip to content

search-ms URI protocol handler abuse

Named by 2 kept items in this workspace.

Search every workspace for search-ms URI protocol handler abuse. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • Today I Learned - WebDAV Cache
    writeup2024-08-08

    Referenced from an earlier blog post by the author ("Abusing the ‘search-ms’ URI protocol handler") as related context for WebDAV connection mechanics

  • Abusing the “search-ms” URI protocol handler
    writeup2024-08-04

    HTML file automatically triggers a search-ms:// pop-up ('Open Windows Explorer?') that searches a remote server for term 'e_Statement' and displays a spoofed result with a custom displayname (e.g. 'Downloads')

All techniques in this workspace.