| 123456789101112131415161718192021222324252627282930313233343536 |
- 1
- 00:00:00,028 --> 00:00:06,294
- 打开 Windows 10 LTSC 2021 隔离虚拟机
- 2
- 00:00:06,294 --> 00:00:12,294
- 复制新版 PCL 2.99.0.1 压缩包到桌面
- 3
- 00:00:12,294 --> 00:00:21,200
- 解压到桌面
- 4
- 00:00:21,200 --> 00:00:55,841
- 运行 PoC：伪造公告服务器、hosts 与自签 CA
- 5
- 00:00:55,841 --> 00:01:08,809
- 方法一：LaunchAdvanceRun 已被 2.99.0.1 拉黑，payload 未执行
- 6
- 00:01:08,809 --> 00:01:17,247
- 删掉整个 PCL
- 7
- 00:01:17,247 --> 00:01:34,680
- 方法二：notice.cfg + slientupdate → 静默更新 → 任意 exe
- 8
- 00:01:34,680 --> 00:01:51,289
- 零点击成功：PCL 退出时执行下载的 exe
- 9
- 00:01:51,289 --> 00:02:03,289
- 结论：方法一被堵，方法二仍然可用
|
